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Jim Zemlin, director of the Linux Foundation, says the platform's best and 
worst feature is that anyone can make a new Linux out of the kernel. 

Foundation hopes 
mobile unifies Linux 



BY ALEX HANDY 

Sure, it's called Linux, but the 
actual software run on one 
version may not work on 
another. The best and worst 
thing about Linux, said the 
director of the Linux Founda- 
tion, is that anyone can call 
any kernel-derived product 
"Linux." But efforts at the Lin- 
ux Foundation continue the 
push to remove ambiguity 
from the Linux ecosystem. 

While the Linux Standard 
Base, already at version 4.0, is 
helping to bring distributions 
back together, the emerging 
mobile space and the fast pace 



of innovation continue to chal- 
lenge the Linux community's 
cohesiveness. 

Jim Zemlin, director of the 
Linux Foundation, said that the 
degree of Linux fragmentation 
varies from market to market, 
noting that low-level support 
for devices is needed for con- 
sumer electronics manufactur- 
ers that wish to use Linux, 
while enterprises need more 
cohesion around the services 
and support they buy from 
enterprise Linux vendors. 

"In the data center, you're 

not dealing with shrink-wrapped 

continued on page 26 ► 



The top 10 enterprise 
architecture blunders 

People skills are most necessary leadership qualities 



BY ALEX HANDY 

Even if your enterprise architect 
knows standards, code and the 
best practices better than he 
knows his own family, Gartner 
Research warns that he still may 
be the wrong person for the job. 
The analysis firm released a 
list of the top 10 enterprise 
architecture mistakes it has 
identified, in advance of its 
Enterprise Architecture Sum- 
mit, to be held on Oct. 7 in 
Orlando. The lack of people 
skills and social connection were 



at the top of potential hazards 
for architects. 

R. Scott Bittler, vice president 
of Gartner's IT research division 
and an expert of enterprise archi- 
tecture at Gartner, said that the 
No. 1 reason for failure in an 
architectural effort was having 
the wrong leader for the project. 

"If you give me two people, 
one of them knows architecture 
pretty well and is weak on the soft 
skills: communication skills, the 
ability to be persuasive, the abili- 
ty to be a strategically minded 



thinker, the ability to build and 
use business relationships," said 
Bittler. "On the other hand, I 
have a candidate that has soft 
skills. Best practices would dic- 
tate that I go for the second guy. 
That's counterintuitive. 

"I know lots of architects who 
know architecture very well but 
are ineffective because of these 
other weaknesses. That's the 
person who talks in a monotone, 
and nobody listens to them 
because they're not very good 
continued on page 26 ► 



Microsoft hands out 
fuzz r binary testers 



BY DAVID WORTHINGTON 

Microsoft is offering free tools 
for binary analysis and fuzz test- 
ing as part of its rollout of 
resources for the verification 
stage of its Security Develop- 
ment Lifecycle (SDL) initiative. 

The SDL is the software secu- 
rity assurance process that 
Microsoft follows internally. The 
company requires that its devel- 
opers use the SDL for all of its 
software products, and it has 
begun offering its tools and docu- 
mentation for outside developers. 

Microsoft began sharing the 



SDL in 2008 as part of a cam- 
paign to secure the Windows 
ecosystem further down the 
stack by helping third-party 
developers write better software. 
"The investments that we 
made are paying off for [our] own 
products, but we feel strongly 
given scope of security problems 
that we can't do it alone," said 
David Ladd, principal security 
program manager for Microsoft's 
SDL team. "Working with [the] 
community — developers and 
partners — to get tools and the 
continued on page 26 ► 
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SpringSource, VMware road map materializes 

Focus of merger will be greater visibility into virtualization 



BY ALEX HANDY 

VMware's future plans for 
SpringSource — a company it 
acquired in mid-August — 
involve providing greater visi- 
bility into virtual environments 
and the applications running on 
them, according to executives 
from both companies. 

The post-merger road map 
began to materialize at the 
VMworld conference in San 
Francisco in early September. 
Future additions to the VMware 
platform will include tie-ins for 
the Spring framework, which 
will provide insight into the 
inner workings of virtualized 
Java applications. 

Rod Johnson, CEO and 
founder of SpringSource, said 
that virtualization can minimize 
the complexity developers have 
to worry about. "You really want 
to conceal the complexity that 
comes underneath. The ulti- 
mate goal of Spring was that 
you write your business logic, 
and Spring just does everything 
for you," he said. 

"It's the same experience for 
the entire stack. You shouldn't 
be thinking, as a developer, 
What OS is in that?' That's a 
detail. What you should think 
about is, What is my experi- 
ence when I architect my appli- 




cation? What is the SLA I wish 
to apply to the application? If I 
have a range of applications, 
what am I willing to pay to run 
them? What are any compli- 
ance policies associated with 
this application?' " 

Raghu Raghuram, vice pres- 
ident and general manager of 
VMware's server business unit, 
said that the virtualization layer 
is an ideal place to enforce poli- 



cies and service-level agree- 
ments across a data center. 

Raghuram detailed VM- 
ware's long-term Java goals. 
"The first task has been to make 
sure Java runs great on virtual 
machines, and we have done 
that," he said. "The second is to 
provide additional services for 
these [Java] applications, such 
as fault tolerance, easier disas- 
ter recovery, and application- 



aware firewalling, which we 
introduced with our security 
product this year." 

Johnson said that Spring will 
give VMware greater insight 
into application performance. 
"Going forward, we have an 
interesting ability to have deep 
knowledge that's shared 
throughout the stack. Spring 
configures and manages pretty 
much every business object in a 
Spring application," he said. 

"It also interacts with most 
transactions between those 
objects. We have the ability to 
instrument those components 
and extract the data. Now 
we're going to be able to share 
that data with the virtualization 
layer." 

As for the elements of 
Hyperic, which SpringSource 
acquired this May, Raghuram 
said the Hyperic monitoring 
tools will make their way into 
the VMware management and 
monitoring utilities. In addi- 
tion, version 3.0 of the Spring 
framework is scheduled to 
arrive in late October. 

WHAT OF THE JCP? 

VMware got a seat on the Java 
Community Process executive 
committee when it acquired 
SpringSource, as Johnson was 



recently elected to that panel. 

"Frankly, as far as Spring- 
Source's involvement, VMware 
doesn't change anything. VM- 
ware is entering into a new area 
with this. I think, frankly, the 
Sun acquisition is a much big- 
ger deal in terms of the JCP," 
said Johnson. 

He continued: "I don't 
anticipate seeing radical 
change. I do think it is very 
important that Oracle opens 
up some areas of the JCP that 
Sun has kept an unfair degree 
of control of. One of those is 
the field-of-use restriction of 
the TCK. Realistically, Sun has 
always been a minority of one 
on that issue in the Java com- 
munity. I think that's a great 
opportunity for Oracle to 
build trust. 

"I think if Oracle does not 
resolve that, there will be a 
degree of impatience. Sun has 
got a little bit of a get-out-of- 
j ail-free card because they're 
not Microsoft or Oracle, despite 
the fact that they're tremen- 
dously litigious. If Oracle con- 
tinues to do what Sun has done 
with the JCP, there's going to be 
limited patience with them. As 
for the general historical erosion 
of the JCP, I don't think that's 
going to change." I 



•NET development comes to the iPhone 

Novell's MonoTouch SDK converts code into Objective-C f also integrates with Xcode 



BY DAVID WORTHINGTON 

Apple restricts developers from 
distributing runtimes with 
iPhone applications, effectively 
closing the door on managed 
code — until now. Novell has 
produced an SDK to get 
around that restriction by con- 
verting .NET code into Objec- 
tive-C. 

Novell began shipping 
MonoTouch in September. 
MonoTouch is a proprietary 
product that costs US$399 for a 
one-year subscription per 
developer for the personal edi- 
tion; an enterprise edition is 
available for $999 per develop- 
er per year. 

The SDK was developed by 
Novell's Mono team, which 
produces an open-source 
implementation of the Com- 
mon Language Infrastructure, 



upon which Microsoft's .NET 
Framework is based. When 
asked why MonoTouch was not 
available as an open-source 
solution, Mono product manag- 
er Joseph Hill said that there is 
"nothing open source about the 
iPhone development story." 

MonoTouch bundles Micro- 
soft's .NET base class libraries, 
and has tools and libraries to 
expose the iPhone's features to 
.NET developers in a .NET- 
friendly API, Hill said. It also 
integrates with Apple's Xcode 
IDE for testing applications on 
the device or for using Apple's 
iPhone Simulator. 

A custom cross-compiler 
turns .NET executable files and 
libraries into iPhone native 
code. "Part of the magic of 
.NET was to create a generic 
runtime able to bind to differ- 



ent languages. We had no way 
of integrating with Objective-C, 
so we created an extension to 
our runtime," explained Miguel 
de Icaza, Mono project lead 
and vice president of developer 
platforms at Novell. 

"The iPhone has experi- 
enced tremendous adoption in 
both consumer and business 
markets," said Al Hilwa, pro- 
gram director of application 
development software at IDC. 
"Given that applications are a 
key reason for the iPhone's suc- 



cess, a solution that allows 
.NET developers to use existing 
skills to build iPhone applica- 
tions is an exciting and conse- 
quential milestone in the evolu- 
tion of mobile platforms." 

Millions of .NET developers 
will be able to become iPhone 



developers, said Hill. "We have 
had overwhelming demand for 
Mono for iPhone," he said. He 
stated that several hundred 
developers participated in the 
MonoTouch beta, and that 
many had applications ready to 
submit to Apple's App Store. I 




Using MonoTouch opens the door for .NET developers to become iPhone developers, according to Mono. 
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Microsoft loosens grip on CodePlex 

Creates foundation to take repository into wider developer community 



BY JEFF FEINMAN 

In its latest effort to embrace 
open source, Microsoft has cre- 
ated an open-source foundation 
of its own. 

Microsoft in September 
launched the CodePlex Founda- 
tion, a non-profit foundation 
focused on the exchange of code 
and knowledge among software 
companies and open-source 
communities. It is an extension 
of Microsoft's Codeplex.com 
open-source project hosting site, 
but Microsoft said the two are 
independent from one another. 

Sam Ramji, who will be serv- 
ing as the CodePlex Founda- 
tion interim president, called 



the foundation a "culmination" 
of what Microsoft has been 
working toward as an open- 
source strategy. He noted that 
Microsoft has increased its 
open-source participation, 
pointing out the company's 
funding and code donations to 
the Apache Software Founda- 
tion, as well as Microsoft's 
Open Source Technology Cen- 
ter's (OSTC) cooperation with 
the PHP community. 

"The increasing participa- 
tion in open source at 
Microsoft led to internal dis- 
cussions about initiating a new 
open-source foundation that 
would be sensitive to the needs 



of software developers who 
don't always participate in 
open-source community pro- 
jects," Ramji said. 

"Existing open-source foun- 
dations are mostly targeted at 
particular projects, such as the 
Mozilla Foundation. The Code- 
Plex Foundation will comple- 
ment the activities of other 
open-source foundations by 
addressing a full spectrum of 
software projects." 

When asked how an open- 
source foundation could have so 
much Microsoft involvement, 
Ramji said Microsoft and open 
source are no longer "antitheti- 
cal, but work closely together." 



The foundation hopes to 
increase its independence with 
funding from sources outside of 
Microsoft, he said. 

The CodePlex Foundation 
will be different from other 
open-source foundations 

because it will focus on the con- 
tributions of copyrights along 
with code from individuals who 
work for software companies, 
Ramji said. The focus is to 
make sure it's easy to grant soft- 
ware use rights on behalf of a 
company to a community. 

"It's a different dimension 
from what other foundations 
are focused on, where when we 
think about an open-source 



THE INTERIM BOARD THAT WILL SHAPE CODEPLEX 



In addition to Sam Ramji, five other software 
executives have been named as an interim 
board of directors for the CodePlex Founda- 
tion, some from Microsoft and some not. 

Bill Staples, Stephanie Boesch, Miguel de 
Icaza, Britt Johnston and Shaun Walker will 
all help shape the foundation over the next 
100 days. 

Staples is Microsoft's general manager of 
the Web platform and tools engineering 
teams. Recently, he has led Microsoft's Inter- 
net Information Services team, and he has 
also worked on Web technologies running on 
operating systems like Solaris and Windows. 

"I feel lucky to be a part of the interim 
board of directors as we spend the next 100 
days working together with the board of 
advisors to structure how the foundation 
will work," Staples wrote on his blog. "The 



CodePlex Foundation is a com- 
pletely separate organization 
from Microsoft. I believe the 
foundation will make it easier 
for Microsoft and other com- 
mercial software companies to 
participate in open source." 

Boesch is a Microsoft pro- 
gram manager for the .NET 
Framework. Prior to joining 
Microsoft in 2004, she was an 
internal systems engineer at 
NCR and a marketing manager 
for various software companies. 

de Icaza is Novell's vice president of 
developer platforms. He is the founder of 
the GNOME project and creator of Novell's 
Mono project. 

"There are still many things that I would 




Shaun Walker is the chief 
architect of DotNetNuke. 



like to see Microsoft do, and 
many things that I believe 
Microsoft has to change to 
become a full member of the 
open-source community, but it 
is encouraging to me to see 
Microsoft evolve," de Icaza 
said on his blog. 

Johnston is a Microsoft 
product unit manager for data 
and modeling. Walker is co- 
founder and chief architect of 
DotNetNuke, an open-source 
Web content management sys- 
tem and ASP.NET application development 
framework. Walker has 15 years of experi- 
ence in software development and has 
authored a book about DotNetNuke. I 

—Jeff Feinman 



license, we really think about 
the specific copyright license," 
Ramji said. "That's just a copy- 
right on the code itself, but 
some of the challenges in the 
practices between software 
companies and community pro- 
jects have been how to clearly 
treat what's contributed and 
who can use it. We hope to 
bring some clarity and coher- 
ence to that." 

Ramji added that one bene- 
fit of the foundation is that 
developers can work through 
the legalities to contribute to 
active open-source projects. 

Ramji was expected to be 
leaving Microsoft effective 
Sept. 25 for what he said are 
personal reasons. However, he 
said that the OSTC, which he 
oversaw, will continue on under 
the leadership of Tom Hanra- 
han, who was formerly the 
director of engineering at the 
Linux Foundation and current- 
ly the OSTC's director. 

The CodePlex Foundation is 
license, platform and technolo- 
gy agnostic. Microsoft gave ini- 
tial funding for the CodePlex 
Foundation of US$1 million. 

After the first hundred days 
of the foundation's existence, a 
new executive director will be 
hired and new board members 
will be brought in. Microsoft 
and open-source community 
members will create a charter 
to help guide how the founda- 
tion will be run. I 



Microsoft's Linux community involvement off to a rocky start 



BY DAVID WORTHINGTON 

Microsoft's developers were 
missing in action after the com- 
pany donated GPL-licensed 
drivers to the Linux kernel 
community in July, leaving sig- 
nificant work to the Linux com- 
munity, according to Linux dri- 
ver project lead and Novell 
fellow Greg Kroah-Hartman. 
The company rekindled its 
involvement after Kroah-Hart- 
man published a status report 
in early September. 

Microsoft donated a set of 
three General Public License v2 
license drivers (Hyper-V Linux 
Integration Components) to the 
Linux community in July. The 
drivers are designed to improve 
the performance of the Linux 
operating system when it is vir- 
tualized on the Windows Server 



2008 Hyper-V hypervisor-based 
virtualization system, and they 
were released after the company 
was found to be in violation of 
the GPL. 

The drivers required a "mas- 
sive cleanup effort," consisting 
of more than 200 patches to 
bring the code into a "semi- 
sane kernel coding style," 
Kroah-Hartman wrote in the 
status report. 

"Their code needed lots of 
work to get to normal Linux 
coding style acceptance, that's 
nothing new. It did take over 
200 patches to get their code 
into reasonable shape, which is 
a bit excessive," he said. 
Microsoft did not contribute to 
the patching effort. 

"Microsoft developers seem 
to have disappeared, and no 



one is answering my e-mails. If 
they do not show back up to 
claim this driver soon, it will be 
removed in the 2.6.33 release. 
So sad..." Kroah-Hartman 
wrote in the status report. 

Version 2.6.31 of the Linux 
kernel was released on Sept. 9 
and did not include the drivers. 
They are slated for version 
2.6.32, which is due out in 
three to four months, and the 
2.6.33 release will be out in 
three to four months after that, 
Kroah-Hartman said. "The 
patches done by the communi- 
ty (and myself) were to fix the 
code to follow the proper ker- 
nel coding rules." 

Microsoft contests Kroah- 
Hartman's assertion that there 
was no contact between them. "I 
am not sure where this is coming 



from. I know for a fact that the 
team has been chatting with 
Greg as recently as yesterday 
[Sept. 9]," responded Microsoft 
spokesperson Blair Fillingham. 

"Yes, that is true, but that is 
after I posted the original mes- 
sage to the Linux kernel mail- 
ing list," Kroah-Hartman said. 
The mailing list was distributed 
in early September. 

Kroah-Hartman added that 
he did not see any kernel patch- 
es from Microsoft since the 
original code release, except for 
an update to the TODO file 
that happened in the first week 
of September. 

However, Microsoft was not 
alone in its absence of activity. 
Several companies "popped 
back up" after the status report 
was published, Kroah-Hartman 



said. "That's one reason why I do 
these status reports," he added. 

The status reports notify 
companies that their code might 
be dropped from the Linux ker- 
nel if they are laggards in the 
development process, he said. 
Although not hesitant to point a 
finger at Microsoft, Kroah-Hart- 
man refused to name these oth- 
er companies, claiming it would 
be "rude" to disclose private e- 
mail information. 

"But what's the big deal 
here?" he asked. "This is the nor- 
mal development process hap- 
pening, and a company learning 
how to deal with it. It happens 
every single day with all compa- 
nies who are new to the Linux 
kernel development process. 
Sure, some do it better than oth- 
ers, but in the end, it's all good." I 
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JIRA 4 status updates take a page out of Twitter 

Activity streams make project management, issue tracking more like the messaging service 



BY ALEX HANDY 

What if your team sent their status 
updates to you via Facebook or Twit- 
ter? The new version of Atlassian's 
enterprise issue tracking platform, 
JIRA 4, adds an activity stream to 
users' dashboards, giving project man- 
agement the same stream-of-con- 
sciousness feel as a Facebook or Twit- 
ter feed. JIRA 4 also adds a new query 
language for squeezing information out 
of the bug database, as well as new UI 
refinements. 

Ken Olofsen, project marketing man- 
ager for JIRA, said that the new activity 
stream tracks "various things going on 
that are relevant to projects, issues or 
users. It's a great way for teams to be 
aware of the activity going on with 
respect to the bugs they're working on 
and closing out." 

Version 4 also adds support for 
OpenSocial gadgets. Google's API for 
social applications provides the basis 
for dashboard gadgets in JIRA 4. That 
means development managers can 
bring in standard Google gadgets for 
use in their dashboard. Atlassian has 
also whipped up a number of useful 
gadgets of their own, such as dynamic 



graphs charting bug closures and devel- 
oper productivity. 

Another area of improvement for 
JIRA 4 comes with the addition of the 
new JIRA Query Language (JQL). "It's a 
structured syntax that allows you to 
build queries," said Olofsen. 

"We had this fear, initially, that this 
might be an intimidating feature. We've 
built the UI to introduce JQL in an 
easy-to-understand fashion. The issue 
navigator screen has an auto-complete 
feature. It will automatically give me a 
drop-down of all the fields I can take a 
first action on. The queries build them- 
selves." 

Version 4 also introduces new UI 
refinements and an updated plug-in sys- 
tem. Olofsen said that Atlassian will host 
such plug-ins for easy access by other 
users. 

JIRA 4 also introduces a new licens- 
ing model for Atlassian's flagship prod- 
uct. With the release of version 4, JIRA 
will, for the first time, be licensed per 
user. Olofsen said a new low-end license 
will be made available at US$1,200 for 
teams of 12 or fewer. Larger installa- 
tions up to 50 users can cost up to 
$8,000, he said. I 
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JIRA 4 emulates the message stream from popular websites like Facebook and Twitter. It also 
comes with an updated plug-in system and new UI refinements. 
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Big Lever puts testing on equal footing 

Program for product line development emphasizes testing through life cycle 



BY DAVID RUBINSTEIN 

Variations that occur in soft- 
ware product line development 
create problems for the quality 
assurance team. To address that 
difficulty, BigLever Software in 
September announced the cre- 
ation of a program designed to 
bring testing onto equal footing 
with others aspects of the prod- 
uct line life cycle, such as 
requirements and coding. 

Software product line devel- 
opment helps organizations 
that have a portfolio of similar 
products that use much of the 
same code base, but have dif- 
ferences in features and func- 
tions. To ensure good testing is 
occurring, its important to have 
symmetry between require- 
ments and integration tests, 
design models and subsystem 
tests, and source code and unit 
tests for each variation of the 
software. BigLever is introduc- 
ing a methodology for provid- 
ing this symmetry throughout 
the product line life cycle as 
part of the new program. 
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Keeping the symmetry of the V's is critical to ensuring that variations are accommodated at each stage of the product line development life cycle. 



So when components are 
developed with product differ- 
ences in mind, it's important 
to create tests in parallel, 
explained Charles Krueger, 
CEO of BigLever. As unit tests 
are created, the same mecha- 
nisms for introducing variations 
into the code base need to be 
put into the tests, he added. 

"When you're creating 
diversity in the life cycle, you 
want the test suite to be auto- 
matically configured to test the 



features you have," Krueger 
said. As an example, he said: "If 
you're doing a car, you don't 
want to test the GPS system if 
it's not in that model of car." 

The program is built upon a 
newly created bridge between 
BigLever's Gears SPL Lifecy- 
cle Framework and IBM's 
Rational Quality Manager. 
This software allows users to 
define test cases according to 
features, and indicate in a con- 
sole view which tests need to 



be run for which versions of 
the software. Icons indicate if 
the tests should be run for all 
versions, or whether they 
should be included in certain 
versions but not others. "It 
creates a variation point mech- 
anism at the test case level," 
Krueger said. 

Integration techniques and 
strategies for using open-source 
frameworks, such as CppUnit 
and JUnit, are provided for 
managing the unit test varia- 



tions in a manner that corre- 
sponds to executable models 
and source code. The Gears 
framework/Quality Manager 
bridge enables users to auto- 
matically configure unit tests to 
match the feature sets of each 
product in the product line. 

"The product line problem 
is pervasive. It's everywhere we 
look," Krueger said. "People 
are realizing that this thing 
they're dealing with has a 
name." I 
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Startup migrates CRM 
apps to private clouds 

Queplix QueCloud 3.5 works with Java EE 



BY DAVID WORTHINGTON 

Cloud platform startup Queplix has 
announced a preview of its QueCloud 
3.5 platform for migrating legacy CRM 
applications to private and multi-ten- 
ant clouds. 

The QueCloud platform consists of 
an enterprise search utility called Que- 
Search, and a system that extracts busi- 
ness logic, security access controls and 
structured data from legacy CRM 
applications for conversion to Java EE 
applications. The preview became 
available on Aug. 31. 

Avaya AIC Business Applications, 
PeopleSoft, Quintus eContact, Siebel 
and Vantive Systems applications may 
be migrated to the QueCloud platform, 
according to the company. 

The applications can run either on a 
server or may be virtualized in VMware 
ESX and XenServer formats. Que- 
Cloud supports deployment to the 
Amazon Web Services EC2 platform. 

However, conversion is not always 
entirely automatic, said Queplix CTO 
Steve Yaskin. The platform has visual 
design tools to help developers port 
heavily customized "spaghetti code" to 
Java, he explained. Customers may also 
need to utilize Queplix's professional 
services to upgrade legacy systems in 
order to build a hybrid cloud that can 
keep data in house behind a firewall, 
he said. 

ALSO IN THIS VERSION 

In addition to converting from legacy 
systems, the designer allows develop- 
ers to add such features as business 
intelligence, LDAP directory services, 
reporting or single sign-on from their 
modern infrastructure to applications, 



Yaskin said. 

Developers may also integrate Que- 
Search into their applications, which 
combines and globalizes data from dis- 
parate sources. QueSearch crawls 
structured and unstructured data 
stored in enterprise applications, such 
as Microsoft Exchange and those from 
Oracle, PeopleSoft, Salesforce.com, 
SAP and Siebel. 

It then creates synthetic data 
objects that can be injected into search 
indexes, such as Autonomy, Endeca, 
FAST or Google's Search Appliance. 

User access controls from directory 
services define what end users have 
visibility into, and the individual appli- 
cations maintain their permissions and 
security, said Queplix CEO Mark 
Cashman. "It's not just generic crawl- 
ing." 

Results may be role-based so that a 
sales representative gets invoices, said 
Yaskin. 

Results are interactive. Users may 
click on a link and drill down into infor- 
mation as if they were creating a new 
order, Cashman said. They can then log 
into the sales application interface off 
of the same screen and "drill into 
another layer of the application." 
Search metadata is updated in real 
time with each transaction that a use 
performs. 

Many companies are struggling with 
data integration, Cashman said. "It is 
painstaking work for a business analyst 
to log into different databases." 

Queplix is funded by San Francisco- 
based Javelin Venture Partners, which 
specializes in early-stage funding. The 
final edition of QueCloud 3.5 will be 
available before the end of 2009. I 
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WinTimelineView emulates Microsoft Outlook with the calendar in its scheduling applications. 

Infragistics Win Client targets 
WinForms development 



BY DAVID WORTHINGTON 

Component maker Infragistics has 
released an updated suite of .NET con- 
trols for Windows client applications that 
focuses heavily on Windows Forms devel- 
opment. It also makes its Windows Pre- 
sentation Foundation (WPF) grid control 
perform more like Microsoft Excel. 

Released in September, Net Advantage 
for .NET 2009 Volume 2: Win Client 
introduces three new WinForms controls: 
a timeline for scheduling applications, a 
tile panel, and a container for embedding 
other controls within Infragistics' controls. 

WinTimelineView displays scheduled 
appointments over a horizontal axis; 
schedules for multiple people can be 
included within the same application. The 
WinTilePanel control is a port of Infragis- 
tics' Silverlight Tile Panel user interface; it 
allows multiple pieces of information to 
be displayed within a single screen. 

WinControlContainerEditor is a port 
of a WPF control for embedding custom 
controls so that gauges and charts may 
appear inside of grids, for example. 

The existing WinForms grid control 



has more options for styling appearance 
objects, and can now drill down into selec- 
tions of data, said Andrew Flick, product 
manager for Win Client. "Animations on 
Windows Forms are something that our 
customers will find really valuable. 

'We will push Windows Forms despite 
enhancements on other [Microsoft] plat- 
forms," he continued. 'We want to give 
customers the choice of using Windows 
Forms for the long term. There is a lot of 
existing development in Windows Forms." 

Infragistics' WPF data grid was given 
new data visualization capabilities and 
includes many usability changes. Devel- 
opers may add custom interface ele- 
ments for data errors that violate data 
structures or classes, and can also display 
historical data within a cell. End users 
can now fully utilize the Windows clip- 
board, undo any action, and plan and 
customize the fields inside of a grid. 

Pricing starts at US$1,195, with cus- 
tomizable support available for an addi- 
tional $495. The Windows Forms and 
WPF toolsets may be purchased individ- 
ually for $995 each. I 



TALEND MASTERS DATA WITH REPOSITORY 



BY ALEX HANDY 

Summer may be over, but one acquisi- 
tion from that now-gone busy season 
has reached completion. Earlier this 
summer, Talend purchased a master 
data management (MDM) repository 
and management layer from Amalto, a 
business-to-business integrations com- 
pany. The new MDM repository will 
form the basis of a new MDM solution, 
which will arrive from Talend in early 
2010. 

Yves de Montcheuil, vice president 
for market strategy at Talend, said that 
the Amalto repository will be the central 
storage point for "truth" (verifiably cor- 



rect information) in enterprise data. 

"MDM is about consolidating cer- 
tain types of data into a central reposi- 
tory: Customer data, product data and 
all the data shared between the differ- 
ent solutions," said de Montcheuil. 
"The central one is the MD repository, 
which contains the single version of 
truth." 

de Montcheuil said that Talend plans 
to release this repository and manage- 
ment layer as part of an open-source 
MDM suite, available at the beginning 
of 2010. Talend will sell commercially 
applicable additions on top of this open- 
source suite. I 
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XBRL US opens lab in United States 

Interoperability will be the focus of collaboration 

BY DAVID WORTHINGTON announced on Sept. 14 that it is XBRL more interoperable with exchange business and financial 

XBRL US, the non-profit body broadening its partnership with existing information systems. performance information. It is 

that oversees the XBRL report- private and public sector part- XBRL is an XML-based governed by XBRL Interna- 

ing standard in the U.S., ners by building a lab to make standard to define and tional, a not-for-profit consor- 

Your Database is talking, 

are you listening? 




^oo^ioioioion 10;o , 07oo) 007o 'oy 707o 
^ °'°'°°'°'o,o, 070 , 



Business Data contains valuable information. 
With Syncfusion's powerful Business Intelligence 
components built on the industry standard SQL 
Server Analysis Services platform you can create 
dashboards, tune in, listen and make informed 
decisions. 

Learn more about Syncfusion's powerful components 
for Business Intelligence at syncfusion.com/bi 



ftjW ftlSwK | 



\ 




Download a free evaluation today 



www.sy 



ncfusi 



on.com 



i 



tf 



1 888-9DOTNET 



ASP.NET MVC ASP.NET Windows Forms Back Office Silverlight 



_ j :5:Syncfusion 

wpf Business intelligence Deliver innovation with ease 



tium. The U.S. Securities and 
Exchange Commission mandat- 
ed its use in December 2008 for 
500 public companies. 

The European Union Cen- 
tral Bank, Japan's Financial 
Services Agency, and the U.S. 
Federal Deposit Insurance 
Corp. have adopted XBRL as a 
standard for bank reporting. 

The technology makes 
internal and external financial 
information available in real 
time. Additionally, XBRL auto- 
mates data transfer: informa- 
tion does not have to be re- 
entered, there is an absence of 
human errors introduced by 
intermediaries, and any error 
is preserved. 

XBRL taxonomies provide a 
set of tags that represent 
accounting standards, such as 
Generally Accepted Account- 
ing Principles (GAAP) for 
financial reporting. XBRL US 
has now established labs to har- 
monize XBRL taxonomies with 
other XML messaging stan- 
dards, including ISO 20022 
(Financial Services Messaging) 
and the U.S. government's 
National Information Exchange 
Model. 

INSIDE THE LAB 

Six researchers who have par- 
ticipated in the XBRL US 
development for the last three 
years will staff the lab. Work 
will be commissioned by 
research partners with fund- 
ing, as well as experts on loan 
who will work at the labs as 
research fellows and interns. 
Research will be made avail- 
able to XBRL US consortium 
members. 

The lab work comes on top 
of existing efforts by XBRL 
International, which has offered 
training workshops for XBRL 
filers, free educational Webina- 
rs, a GAAP taxonomy preparers 
guide, and other supportive 
tools and documentation. 

"We expect a healthy mix of 
public- and private-sector 
research partners," said Mark 
Bolgiano, president and CEO 
of XBRL US. "Our team has 
proven itself in developing the 
largest taxonomies of its kind, 
using a cross-industry, 'crowd- 
sourced' and transparent 
approach, with sound planning 
and management. Our aim is to 
make XBRL US Labs a fulcrum 
to move industry and govern- 
ment toward a future that has 
significantly higher levels of 
information quality, consistency 
and transparency in the United 
States." I 



www.sdtimes.com 



Software Development Times . October 1 r 2009 



NEWS 



13 



Eucalyptus now works with VMware 

Amazon APIs are the centerpiece of the cloud compatibility expansion 



BY ALEX HANDY 

Imitation, they say, is the high- 
est form of flattery. Silicon Val- 
ley startup Eucalyptus Systems 
is showing its adulation for 
Amazon Web Services' APIs by 
implementing them in its own 
cloud environment. The result 
is an installable internal cloud 
platform: Eucalyptus Enter- 
prise Edition, which can be run 
on top of VMware. 

Matt Reid, vice president of 
sales and marketing for Euca- 
lyptus, said that this release is 
intended to drive the adoption 
of the platform, and as such 
will be priced low on a per- 
core basis. 

Previous versions of Euca- 
lyptus were built for KVM and 
Xen, but Rich Wolski, CTO of 
Eucalyptus, said that support- 
ing VMware means Eucalyptus 
will be more appealing to enter- 
prise users. 

The move to VMware is a 
part of the long-term plan at 
Eucalyptus, said Wolski. "That 
future, we think, is driven by 
the speed with which the tech- 
nology rolls forward. When Xen 
came out, there was a huge 
upsurge in interest. Then KVM 
really gained some prominence. 
We're seeing a lot of interest 
and technology drive in KVM. I 
think it will continue this way. If 
you're in the business of man- 
aging a data center life cycle, 
you want to be able to capitalize 
on whatever technology at 
whatever price." 

Of course, the most impor- 
tant part of the support puzzle 
is the addition of new Amazon 
APIs. Wolski said that Eucalyp- 
tus primarily focuses on adding 
in the Amazon APIs that are 
most effective in a service 
offered within the cloud. 

"So far we haven't decided 
one way or the other about the 
most recent set of [Amazon] 
API additions," he said. "The 
ones we're looking at now are 
the load balancing API and the 
monitoring and introspection 
APIs. These are clearly things 
people want. 

"There're cogent arguments 
for doing them as part of the 
cloud fabric themselves, as well 
as arguments against that. We 
have been careful so far to 
restrict ourselves to functionali- 
ty that exists in the cloud layer 
as a hosted set of services." 



The open-source Eucalyptus development team at Eucalyp- they had been discouraging overhaul, he said that the corn- 
project should see some major tus Systems has just finished a third-party code contributions. munity should be able to begin 
community contributions soon major refactoring of the code, Now that the source code is contributing in earnest in 
as well. Wolski said that the and prior to its completion, more solid and past the major November or December. I 
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Terminal emulation and legacy integration software maker 
BlueZone Software and automated software testing company 
SmarteSoft are offering a suite of test automation software 
to developers and enterprises maintaining legacy applications 
on IBM System i and System z servers. BlueZone executives 
said combining BlueZone with SmarteSoft's SmarteScript 
and SmartX applications gives System i and z users Smarte- 
Soft's automated reporting features . . . Computer scientists at 
Yale University have created the HadoopDB open-source data 
management hybrid system. HadoopDB was created from com- 
ponents including Apache Hadoop data-sorting technology, 
Hive (the internal Hadoop project created by Facebook) and 
PostgreSQL. 
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NEW PRODUCTS 



Data center product provider Emulex has released a software 
development kit for target mode drivers. The TargetConnect tar- 
get mode software developer kit lets data center managers build 
and deploy Intel architecture-based storage products using 
Emulex Small Computer System Interface target mode drivers, the 
company said. 



UPDATES 



The Apache Foundation has announced the availability of 
Apache Felix Filelnstall version 2.0.0, which keeps an eye on 
a directory in OSGi systems. Any OSGi bundles placed in that 
directory are automatically run, and file behaviors transfer to 
the OSGi server: delete the bundle and it stops running, update 
the bundle and it will be updated while running . . . Oracle's 
Berkeley DB, the company's XML database, has received a 
number of performance enhancements, including new B-tree 
compressions, as well as new locking and latching code to help 
speed performance on SMP systems . . . Application develop- 
ment company CAST Software has added new analysis capabil- 
ities for finding source code security problems to CAST Appli- 
cation Intelligence Platform version 6.4. The data flow 
security analyzer can spot problems with the way applications 
handle errors, and it can help prevent misuse of APIs, company 
executives said. Also new in the platform is a dashboard that 
gives users more ways to look at snapshots of applications . . . 
Veryant has updated its isCOBOL application platform. 
isCOBOL Web Direct 2.0 connects COBOL applications to the 
cloud, while isCOBOL SQL Server adds a flexible relational 
database engine to ISAM files without changing current pro- 
gram code or data. This eliminates the need to choose between 
maintaining Indexed Sequential Access Method files or moving 
to a mainstream RDBMS to meet evolving requirements, the 
company said . . . MKS has released MKS Integrity 2009, the 
latest version of its ALM platform. There are new reporting 
capabilities and dashboards that can be tailored to specific 
roles, along with new integrations with BMC and SAP . . . Visu- 
al modeling company SmartDraw has rolled out Smart Draw 
2010, bringing a mind map feature that uses scheduling fea- 
tures to help projects stay on time. There are also new story- 
board features, along with integration with PowerPoint to build 
PowerPoint presentations in SmartDraw . . . Rich Internet 
application component provider Intersoft Solutions has created 
a service pack for WebUI Studio 2009, which is aimed at 
ASP.NET and Silverlight products. As part of the update, Inter- 
soft's WebTextEditor software has new script injection preven- 
tion, improved XHTML capabilities, and new APIs. The Web- 
Scheduler scheduling component has new SSL (Secure Sockets 
Layer) capabilities and faster timeline rendering, company 
executives said. I 



New diagram support 
makes systems more Visible 

Component, Deployment models give tools extra roles 
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BY DAVID RUBINSTEIN 

Component and De- 
ployment diagram 
types highlight the 
Oct. 1 release of the 
Visible Analyst 2009 
modeler, which Visible 
Systems says now has 
capabilities that open 
the tool up to more 
roles within an IT 
organization. 

The Component 
diagrams allow users to 
visualize the software 
components of a sys- 
tem, while the Deploy- 
ment diagrams offer a 
visual representation of 
a system's hardware 
components, according 
to John Nash, vice president of 
marketing for Visible Systems. 

"Think of it liked a spoked 
wheel," Nash said. "All the 
information is kept in a com- 
mon data repository, and you 
can [diagram and] create addi- 
tional relationships where 
appropriate, and tie in strategic 
planning statements where 
appropriate to better spec out 
the system." 

Component diagrams are 
useful to developers, architects 
and business analysts, he said. 
Developers can see what they 
are required to build, and the 
diagram helps them assess what 
tasks they should begin or 
assign to someone else, or 
where they will need to 
improve their abilities for a part 
of the project down the road. 
Architects use the diagrams to 
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Visible's Component diagrams can be used to match tests with components. 



visualize the system and make 
sure the components provide 
the necessary functionality, 
while business analysts can view 
the system to gain an under- 
standing of what is being built. 

"There might be 20 or 30 
different types of [roles] work- 
ing on common systems," Nash 
said, and with the additions to 
Visible Analyst, they now can 
work out of the same software. 

Visible Analyst 2009, which 
sells for US$1,995 per floating 
node, has a global data model 
and what Nash called intelligent- 
ly linked sub-models, which he 
said enable users "to develop 
really big systems. When you get 
all these diagrams and data rela- 
tionships constructed, Visible 
Architect won't choke." 

The additions give Visible 
Analyst 2009 what the company 



calls "state of the art support" 
for the Unified Modeling Lan- 
guage 2.1 specification overseen 
by The Object Management 
Group industry consortium. In 
the last release of the tool, Visi- 
ble added support for OMG's 
Business Process Modeling 
Notation, making it more useful 
for business analysts. 

Those additions, and notably 
the Deployment diagram sup- 
port, mean that Visible Systems 
is "taking a big step into the 
embedded space, where we 
haven't been," Nash said. 
Deployment diagrams show the 
relationship between software 
and hardware components in a 
system, and they can help 
define how the system should 
perform, how it can be main- 
tained and ported, and how it 
can scale. I 



GRAPECITY ACQUIRES FARPOINT 



BY DAVID RUBINSTEIN 

GrapeCity, a Japan-based seller 
of software components, 
announced in September the 
acquisition of FarPoint Tech- 
nologies, maker of the Spread 
line of spreadsheet compo- 
nents. Terms of the transaction 
between the privately held 
companies were not disclosed. 
The deal was expected to be 
completed by Oct. 1. 

The FarPoint acquisition is 
the most recent for GrapeCity, 
which claims to have 80% of 
the component market in Japan 



and employs about 800 people 
worldwide. In October 2008, 
GrapeCity purchased Data 
Dynamics, which developed 
data analysis and reporting 
software. 

The addition of FarPoint s 
software "completes a set of 
deep functionality products" 
that GrapeCity thinks it can sell 
to replicate its success in Japan 
in other markets, with the U.S. 
at the top of that list. To that 
end, the company will maintain 
FarPoint's North Carolina 
office as its second U.S. loca- 



tion. It also has an office in 
Seattle. 

FarPoint began in 1992 with 
its programmable spreadsheet. 
When Microsoft introduced 
the .NET platform, FarPoint 
released Spread for Windows 
Forms, for ASP.NET, for 
BizTalk Server and now for 
SharePoint, according to Far- 
Point CEO Rick Williamson. 
Spreadsheets and reporting are 
"in the forefront of the busi- 
ness," he said. "We're focused 
on business intelligence and 
business solutions." I 
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Coveros puts continuous integration pieces together 



BY JEFF FEINMAN 

An application security consult- 
ing company thinks there isn't 
enough collaboration among 
open-source builders, so it has 
rolled out a secure continuous 



integrator. 

Coveros focuses on fixing 
security problems and helping 
companies with software quali- 
ty and agile development. The 
company in September intro- 



duced Secured, a free product 
that integrates build manage- 
ment and source code control 
with open-source application 
security technologies in order 
to test Web applications for 



security vulnerabilities. 

"What we found in doing 
agile development is that 
there's a lot of open-source 
products out there for building 
and testing your apps, and a lot 
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LEADTOOLS Recognition 
SDK vl 6.5 

by LEAD Technologies 

Develop robust 32/64 bit document 
imaging and recognition functionality into 
your applications with accurate and 
high-speed multi-threaded OCR, OMR, and 
1 D/2D barcode engines. 

• Supports text, OMR, image, and 
barcode fields 

• Auto-registration and clean-up to 
improve recognition results 

• Provided as both high and low 
level interface 

• Includes comprehensive confidence 
reports to assess performance 

programmers.com/LEAD 

Pragma Fortress SSH 

— SSH Server for Windows 

by Pragma Systems 

Contains Windows SSH & SFTP Servers. Certified 
for Windows Server 2008. Works with PowerShell. 

• Full-featured server with centralized 
& graphical management 

• GSSAPI Kerberos & NTLM authentication 

• Fastest SFTP & SCP file transfer 
•Supports over 1000 sessions 

• Runs console applications & allows history 
scroll back within the same session 

• Runs in Windows 2008/2003/Vista/XP/2000 

programmers.com/pragma 

FarPoint Spread 
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The Best Grid is a Spreadsheet. Give your users 
the look, feel, and power of Microsoft® Excel®, 
without needing Excel installed on their machines. 
Join the professional developers around the 
world who consistently turn to FarPoint Spread 
to add powerful, extendable spreadsheet solu- 
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and SharePoint Server applications. 

• World's #1 selling development spreadsheet 

• Read/Write native Microsoft Excel Files 

• Cross-sheet formula referencing 

• Fully extensible models 

• Royalty-free, run-time free 
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InstallShield 2010 
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by Acresso 

If your software targets Windows®, InstallShield® 
is your solution. It makes it easy to author 
reliable Windows Installer (MSI) and InstallScript 
installations and App-V™ virtual packages for 
Windows platforms, including the new 
Windows 7, keeping your customers happy 
and your support costs down. 

InstallShield is the industry standard for MSI 
installations. Deployed on over 500 million 
desktops worldwide, InstallShield technology lets 
you author high-quality installations for Windows 
and extend them to configure database servers, 
Web services, mobile devices, and more. 

programmers.com/acresso 



866-719-1528 



programmers 

r a paradise 




; dtSearch Engine for Win & .NET 

j Add dtSearch's "blazing speeds" 
(CRN Test Center) searching and 
; file format support 
j • dozens of full-text and fielded 
data search options 
» file parsers/converters for hit-highlighted 

display of all popular file types 
» Spider supports dynamic and static web data; 
highlights hits with links, images, etc. intact 
» API supports .NET, C++, Java, SQL and more; 
new .NET Spider API 



dtSeaixh 
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text in a single index and returns results in 
less than a second. " — InfoWorld 
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Orion Network Performance Monitor is a 
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with your network management needs. 
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networks, not supporting Orion NPM. 
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Enterprise Architect 7.5 

Visualize, Document and 
Control Your Software Project 
; by Sparx Systems 

Enterprise Architect is a comprehensive, 

integrated UML 2.1 modeling suite 

providing key benefits at each stage of 
: system development. Enterprise Architect 
' 7.5 supports UML, SysML, BPMN and 
j other open standards to analyze, design, 

test and construct reliable, well under- 
: stood systems. Additional plug-ins are 
: also available for Zachman Framework, 
i MODAF, DoDAF and TOGAF, and to 

integrate with Eclipse and Visual Studio 

2005/2008. 
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Embedded Database 

by Unify 

SQLBase is an easy to deploy database 
for building desktop and Web applications 
in server environments without a DBA. 

• Small footprint 

• Zero admin deployment 

• GUI admin 

• Embed it and forget it 
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Reduce your database costs and simplify 
maintenance with Unify SQLBase. 
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TX Text Control 15 

Word Processing Components 

TX Text Control is royalty-free, 
robust and powerful word processing 
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CA ERwin® Data Modeler 
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CA ERwin Data Modeler is a data modeling 
solution that enables you to create and 
maintain databases, data warehouses 
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These models help you visualize data 
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complexities, database technologies and 
the deployment environment. 
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• SAPHIR Option: light at the end of the metadata tunnel 
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of people that are using open 
source are having to integrate 
all that stuff together them- 
selves," said Jeffrey Payne, 
CEO and founder of Coveros. 

"Almost everywhere we go, 
we end up helping them pull all 
their stuff together. Our 
thought was, why don't we take 
the best-of-breed open-source 
products that are out there and 
integrate them so they work out 
of the box as one solution?" 

Payne said SecureCI's ability 
to integrate builders and source 
code controllers for free is what 
makes the product unique from 
other build managers. Addi- 
tionally, Coveros integrates 
Sonar, an open-source dash- 
board for analyzing code quali- 
ty. Sonar uses multiple open- 
source static code analyzers and 
gathers the metrics. 

"Now you've got a package 
that gathers results from auto- 
mated tests you set up using 
Selenium or JUnit, or any of 
the application security tests 
you run using Google's Rat- 
proxy, PMD or FindBugs," 
Payne said. 

In Coveros' mind, there are 
three places in continuous inte- 
gration where software needs to 
integrate: build management, 
bug tracking and process met- 
rics. With build processes, a 
developer needs to be able to 
work with Apache Ant or 
Maven and automatically run 
regression and unit tests, Payne 
said. Developers also need to 
associate defects with the code 
or requirements used to create 
the code. Finally, integration is 
needed to put together all 
analysis results. 

"Our goal is to integrate at 
all three of those levels, and 
that way no one has to do that 
when using a continuous inte- 
gration suite," Payne said. 
"What we're trying to do is pro- 
vide open-source integrated 
solutions that help support the 
idea of building your software 
securely." 

Payne added that he was 
"scratching his head" about 
what he considers a lack of 
organizations that integrate 
open-source application securi- 
ty testers, such as OWASP's 
Web Scarab and Paros' Proxy, 
into continuous integration. 
Secured can implement secu- 
rity best practices into the build 
management phase of the soft- 
ware development life cycle. I 



"■from 20 rnkmtss 



for .NET r 



Lulls jVMjsij Sofiwars 




Seconds. . . 



dt/SSfc/ V^j3 



t/me to generate a critical Excel Report 
to 4 seconds" making his team "look like miracle workers. " 

lanager at Oxygen Media in New York 



r 





r 





LUfll 




ASP.NET Excel Reporting 

Easily create richly formatted Excel reports without Excel using the 
new generation of spreadsheet technology built from the ground up 
for scalability and reliability. 



Excel Compatible Windows Forms Control 

Add powerful Excel compatible viewing, editing, formatting, calculating, 
charting and printing to your Windows Forms applications with the easy 
to use WorkbookView control. 



rom Excel Charts and Ranges 

You and your users can design dashboards, reports, charts, and 
models in Excel rather than hard to learn developer tools and you can 
easily deploy them with one line of code. 



Download the FREE fully functional 30-Day 
evaluation of SpreadsheetGear 2009 today at 



www.SpreadsheetGear.co.. 
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Eclipse BIRT gains database component 



BY DAVID WORTHINGTON 

The Eclipse Business Intelli- 
gence and Reporting Tools 
(BIRT) project had data visual- 
ization tools but was missing an 
open-source data warehouse 



component — until now. BIRT 
co-creator Actuate announced 
on Sept. 15 that it had teamed 
up with Infobright to deliver a 
joint solution for enterprises. 
The BIRT project began 



nearly five years ago at the 
behest of the Eclipse Founda- 
tion. It enables developers to 
integrate business intelligence 
into Java EE applications. 

Infobright belongs to the 



Actuate BIRT Global Partner 
Connection, a program estab- 
lished to create business oppor- 
tunities for BIRT. The company 
is a strategic partner. 

The joint solution, called 
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Infobright & Actuate Virtual 
Machine, leverages Infobright 
database technology to enable 
developers to make queries 
against large volumes of data. 
Infobright scales to 50TB of 
data on a single server and uses 
data compression to reduce 
storage requirements. 

Developers can produce 
reports and create data visual- 
izations using BIRT's WYSI- 
WYG report designers. I 

More control 
given to devs 
over .NET 

BY DAVID WORTHINGTON 

An update to InterSystems' 
Ensemble integration platform 
gives developers more control 
over .NET applications and 
increases message handling per- 
formance and reliability accord- 
ing to the company. 

Ensemble now provides a 
higher-level programming inter- 
face for interacting with .NET 
applications, said John Joseph, 
director of product management 
for Ensemble. "The benefit that 
goes along with this is not only 
ease of use, but also the fact that 
automatic services that apply to 
Ensemble's higher-level pro- 
gramming interface (automatic 
heartbeat monitoring, config- 
urable automatic recovery, and 
automatic starting/stopping of 
the .NET gateway server) now 
help developers using the .NET 
gateway." 

HL7v2, SOAP and XML 
message processing is approxi- 
mately 30% faster due to 
changes in the object structure 
of InterSystems' Cache data- 
base, faster indexing of message 
data, and code optimizations, 
Joseph explained. 

A development phase testing 
facility has been added for Elec- 
tronic Data Interchange docu- 
ments, including HL7 and XI 2 
messages, which are commonly 
used in the healthcare industry. 

Additionally, a new message 
editing and resend capability 
helps developers identify failed 
messages, edit them and redirect 
them to the appropriate recipi- 
ent. Transaction information is 
persisted in an embedded edi- 
tion of Cache. 

The update, released Sept. 
1, is available to existing cus- 
tomers with current license 
agreements for no additional 
charge. I 
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The Path To Better DATAVisuALiZATion Begihs Here. 

To become a master, you must first seek out the leader. For nearly 20 years, Software FX has risen above all 
others by supplying top-of-the-line data visualization tools to industry managers and enterprise developers 
working in diverse markets, platforms and environments. This wisdom has steadily evolved into a vast body 
of products including best-of-breed data presentation solutions, virtual training for SharePoint, and the most 
powerful selection of data monitoring and analysis components. For a world of software that can raise your 
company to a higher level, depend on the source that's clearly on top. 



VisitSoftwareFX.com for free trial versions, interactive 
demos and more information about our latest products. 

SharePoint is a trademark or a registered trademark of Microsoft Corporation. DataParts is a registered trademarl 
of Software FX, Inc. Other names are trademarks or registered trademarks of their respective owners. 
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development. No ideology, no religious 
wars: 100% practical knowledge. 
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and knowledge that you can apply 
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Windows Embedded Standard 2011 previewed 



BY DAVID WORTHINGTON 

Microsoft has delivered a community 
technology preview (CTP) of Windows 
Embedded Standard 2011, the embed- 
ded version of the Windows 7 stack. 

The CTP, released in September, is the 
first of Microsoft's Windows 7-based 
embedded offerings to be announced; the 
company was expected to announce more 
at the end of September, said Ashwin 
Kulkarni, senior product manager for 
Windows Embedded. 

The Windows Embedded product 
family also consists of Windows Embed- 
ded Compact (which is based on Win- 
dows Embedded CE), Windows 
Embedded Enterprise (which is fully 
application compatible with desktop 



Windows), and Windows Embedded 
POSReady, a solution for point-of-ser- 
vice systems. 

Windows Embedded Standard 2011 s 
new features can be segmented into four 
categories: core platform technologies, 
power management, systems manage- 
ment, and user interface development. 

Technologies included from the Win- 
dows 7 platform wave include Internet 
Explorer 8, Microsoft Remote Desktop 
Protocol 7.0, Windows Media Player 12, 
and Microsoft .NET Framework 3.5 
Service Pack 1. Sixty-four-bit hardware 
support has been added as well. 

Developers can create solutions that 
deploy Windows 7's, Windows Touch 
(multi-gesture touch interfaces and con- 



text-aware applications) and Windows 
Flip 3D navigation technologies, in addi- 
tion to the Windows Aero user interface 
and Windows Presentation Foundation 
interfaces. Microsoft's input and display 
technologies will help OEMs differenti- 
ate their devices, said Kulkarni. 

Windows Embedded also inherits 
Windows 7's power management APIs. 
Customers can build solutions with 
improved CPU idle time and lower pow- 
er consumption rates that are Energy 
Star compliant, Kulkarni added. "Cus- 
tomers are using lower power to save 
money on infrastructure." 

For systems management, the Win- 
dows Embedded team has added Active 
Directory group policies from Windows 



Server 2008, said Kulkarni. It also has 
support for Microsoft System Center 
Configuration Manager, Microsoft Ter- 
minal Services and Virtual Desktop 
Infrastructure. 

Devices can seamlessly hook into 
existing enterprise infrastructure, 
Kulkarni noted. He explained that group 
policies created for PC servers and oth- 
er devices can automatically be applied 
to specialized devices that are then man- 
aged like any device on a network. 

General availability is slated for the 
second half of 2010. No pricing details 
have been announced. Microsoft will 
offer Microsoft Certified Technology 
Specialist certification and other train- 
ing prior to its release. I 



Telerik expands into productivity tools 



BY DAVID WORTHINGTON 

Telerik, a maker of .NET interface com- 
ponents and development tools, has intro- 
duced resource and workload manage- 
ment applications for Microsoft's Team 
Foundation Server (TFS). 

Betas of Telerik's TFS Work Item 
Manager and TFS Project Dashboard 
were made available in September. Both 



products were built using Telerik's Rad- 
Controls for WPF by ALM tool maker 
Imaginet. 

Work Item Manager is a replacement 
for Microsoft's Visual Studio's tools for 
TFS, said Todd Anglin, chief evangelist 
for Telerik. "Multiple applications and 
steps are now simplified into a single step, 
and single screen processes in the work 




item manager." 

Some of its features are Work Item 
grid filtering, grouping and aggregation; 
querying; iteration schedules; and a task- 
board view of work items independent 
from any process template. 

The tool lists product backlogs, and 
also makes it easier for development 
teams to view work items and to collab- 
orate, Anglin added. It also has a digital 
white board for agile teams. Teams see 
notes as they are posted, and all infor- 
mation is automatically synced to TFS, 
he said. 

The TFS Project Dashboard visualiza- 
tion tool lets organizations see the health 
of projects and teams, said Anglin. Indica- 
tors show build history, recent check-ins, 
assigned tasks and bug history, as well as 



building accountability for personal tasks, 
workloads and release schedules, he 
explained. "If someone checks something 
in, and it breaks the build, the dashboard 
will show a picture of the person." 

It has several templates for agile devel- 
opment, including Capability Maturity 
Model Integration process improvement, 
Microsoft's MSF for Agile Software 
Development Projects, and Scrum. 

"Microsoft has Team Explorer to 
integrate Visual Studio Team System 
with TFS, and Office Excel to manage 
team data items, but Telerik needed bet- 
ter tools to manage and visualize work 
items while building its software prod- 
ucts," Anglin said. 

"We wanted to give something back 
to developers to help them be more pro- 
ductive while working with TFS, or peo- 
ple that use Microsoft source control or 
workflows." I 



TotalView puts memory in red zone 



BY JEFF FEINMAN 

TotalView Technologies is trying to tailor 
programs into a piece of memory that 
fits just right. 

The company released in September 
MemoryScape 3.0, its memory analyzer 
for C, C++ and Fortran applications. It 
can detect memory leaks, API errors, 
runtime bound violations and other 
memory issues. 

The new version of MemoryScape 
brings a feature called Red Zones, which 
prevents developers from writing pro- 
grams and applications that don't fit in a 
particular memory allocation. 

Chris Gottbrath, director of product 
management with TotalView, explained 
that the biggest memory error that 
TotalView users experience is writing a 
program that is too big for a specifically 
allocated chunk of memory. 

Developers must exercise precise con- 
trol over the runtime allocation and de- 
allocation of memory in low-level lan- 
guages like C and C++. Even high-level 



languages, like Fortran and Java, require 
developers to exercise vigilance over the 
use of memory for data structures. 

While some managed language envi- 
ronments will dynamically allocate and 
de-allocate memory as needed, even in 
those situations developers should be 
aware of what's going on as their appli- 
cations load more data into memory. 

"Sometimes it's possible and frustrat- 
ingly easy to write a little bit past or before 
the array," Gottbrath said. "That can cause 
all kinds of nasty weird problems later on 
in the program because you're writing 
into some other piece of memory." 

Gottbrath said Red Zones solves these 
issues quickly because it marks pages of 
memory as non-writable, telling develop- 
ers to not write on a certain memory array. 

Another new feature in MemoryScape 
3.0 is increased interoperability with the 
TotalView source code debugger. That 
interoperability extends to ReplayEngine, 
a record and replay add-on that offers a 
back-and-forth debugging method. I 



[ 



www.seapine.com/sdtswift 

Satisfy your quality obsession. 



} 



Save time 
while protecting 
software quality 




© 2009 Seapine Software, Inc. All rights reserved, 



Swiftcover.com cut their testing time in half with TestTrack Studio and 
QA Wizard Pro, while still providing the quality their customers expect. 

Seapine's end-to-end Software Quality Assurance (SQA) solutions help you deliver quality products faster. Start with 
QA Wizard Pro for automated testing and add TestTrack Studio for issue tracking and test case management-integrated 
quality assurance solutions that together reduce testing time, saving you money and improving customer satisfaction. 

• Reduce quality assurance costs with automated functional and regression testing. 

• Manage test case development, defect assignments, and QA verification with one application. 

• Track which test cases have been automated, schedule script runs, and link test results with defects. 



<c 



So much of success boils down to time. QA Wizard Pro and TestTrack Studio allow us 
to be more profitable because we do more in less time. —Test Manager, Swiftcover 



Learn how to test faster while protecting quality. Visit www.seapine.com/sdtswift 



>> 



% Seapine Software 



24 



NEWS 



. Software Development Times . October 1, 2009 . 



www.sdtimes.com 



.NET SDK brings scanning to Web apps 

Atalasoft Dotlmage 8.0 has a ActiveX TWAIN control 



BY DAVID WORTHINGTON 

Atalasoft, a document imaging technolo- 
gy software maker, released a new ver- 
sion of its Dotlmage .NET imaging 
toolkit on Sept. 2. The update delivers 
Web application scanning and support 
for 64-bit computing. 

Dotlmage version 8.0 includes an 
ActiveX TWAIN control that enables 
Web applications to process scans. It 
requires no knowledge of ActiveX, and 
it provides a JavaScript API to scan 
and upload documents, said CEO Bill 
Bither. 

An ActiveX control was necessary 
because browsers cannot access exter- 
nal peripherals without some client 
code, Bither explained. .NET tech- 
nologies do not have that capability, he 
added. 

Other enhancements for Web appli- 
cations are comment threads for dis- 
cussing annotations. These threads can 
then be saved in a PDF. There are also 
drag-and-drop thumbnails for reorder- 
ing the pages in a PDF, TIFF or any oth- 
er multi-page image format. Memory 
allocation has been improved to use less 
memory on servers. 



Silverlight controls have been 
added to Dotlmage for viewing and 
annotating images. Those controls also 
provide comments for annotations, 
Bither noted. 

Support for TWAIN 2.0 and TWAIN 
on 64-bit systems has been added for 
any .NET application; scanners can be 
controlled with TWAIN 2.0 or 64-bit 
TWAIN drivers. Drivers are verified 
using Atalasoft's InspectorTWAIN 
utility. 

Atalasoft is offering a new add-on 
that costs an additional US$900 for writ- 
ing ID and 2D barcodes onto any image, 
as well as a document cleaning add-on 



that runs royalty free for 
desktop deployments. The 
barcode add-on for Dotlm- 
age is also available as a 
standalone product. 

Dotlmage 8.0 retails for 
$3,000. Additional licenses 
for the SDK are now one- 
third the cost to make 
Dotlmage more affordable to 
license to teams of develop- 
ers, said Bither. I 

Dotlmage 8.0 enables 

contributors to comment on 

document annotations. 




Solutions migrate VB6 to .NET 

ArtinSoft and Gizmox port VB code to the Web 



BY DAVID WORTHINGTON 

Gizmox, which produces an AJAX devel- 
opment framework, is partnering with 
software transformation service maker 
ArtinSoft to create a solution for cus- 
tomers to port Visual Basic 6 (VB6) 
applications to the Web. 
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A two-step migration solution will be 
commercially available in November 
after Microsoft's Professional Develop- 
ers Conference, said Navot Peled, CEO 
and founder of Gizmox. 

Customers use ArtinSoft's VB 
Migration Services to transform VB6 
applications into Common Intermedi- 
ate Language; they can then be com- 
piled into a .NET language, he 
explained. The code can then be 
copied and pasted into Gizmox's Visual 
WebGUI AJAX development frame- 
work, which can generate a presenta- 
tion layer in HTML or Silverlight 3. 
Flash support is also being planned, 
said Peled. 

The solution also works for .NET 
Windows Forms applications. Artin- 
Soft has ported many third-party 



COM controls to .NET, and Visual 
WebGUI can import .NET controls, 
Peled noted. 

Alternatively, customers will be able 
to use Visual WebGUI to migrate appli- 
cations to Windows Azure. "Visual 
WebGUI is enabling the same desktop 
environment [that the VB6 app runs in] 
off premises," Peled said. "There is no 
adjustment. Everything is included in 
the runtime of the application." 

VB6 applications use less bandwidth 
and consume fewer CPU cycles than 
.NET applications, he said. "Visual 
WebGUI users will see much lower bills 
on Windows Azure or any other cloud 
infrastructure." 

Customers can pay per line of code 
for ArtinSoft's service, or they can pur- 
chase the tool, Peled said. Visual 
WebGUI is offered on a per-seat pric- 
ing basis. The two tools are being inte- 
grated, and the combined version will 
be available at the beginning of 2010, 
he added. I 



JetBrains hastens bug tracking 



BY DAVID WORTHINGTON 

Development productivity toolmaker 
JetBrains has set its sights on making 
reporting and processing bugs faster 
with a new product called YouTrack. 

A beta of YouTrack 1.0, released in 
September, is available for download 
from JetBrains. It can be deployed on a 
Java application server or as a standalone 
Java process. The application has an 
AJAX interface. 

General availability is scheduled 
before the end of 2009; a spokesperson 
did not respond to an inquiry about pric- 
ing. 

YouTrack bug reporting can be added 
anywhere within an application. The 
beta provides query-based search with 
auto-completion and highlighting, a 
query and command syntax that can be 
used for batch operations on selected 



issues, and built-in keyboard shortcuts. 

YouTrack is JetBrains' first product 
developed using its Meta Programming 
System (MPS), a language-oriented pro- 
gramming approach that allows applica- 
tions to be written at a higher level of 
abstraction. MPS is licensed under 
Apache 2.0. 

"As developers and users of our own 
products, we'd grown unhappy with how 
long it took to report and process bugs 
with existing issue-tracking systems," 
Vadim Gurov, YouTrack team lead, said 
in a prepared statement. 

"We set out to change that and ended 
up with a fast, intuitive tool that's friend- 
ly to both developers and casual bug 
reporters. YouTrack packs the majority 
of its is sue -handling functionality in just 
two controls: a search box and a com- 
mand window." I 
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New fuzzer, binary analyzer 



< continued from page 1 

process of SDL into the ecosys- 
tem contributes to a safer com- 
puting experience overall." 

In March, the company 
updated the SDL with new 
guidance for online services 
and line-of-business application 
development, as well as for 
closer alignment to traditional 
software development life-cycle 
phases. It also provided an SDL 
template for Visual Studio 2008 
Team System in addition to its 
existing threat modeler. 

Continuing that effort, 
Microsoft released in Septem- 
ber its BinScope binary analyz- 
er and MiniFuzz file fuzzer. 

BinScope analyzes compiled 
binaries to verify that SDL- 
required compiler/linker flags 
are being set, strong-named 
assemblies are in use, and up- 
to-date build tools are in place, 
according to the company. 

Ladd said that Microsoft's 
developers use BinScope daily 
as part of its SDL compliance 
requirements, and its results are 
presented as part of the applica- 
tions' final security reviews. 

"Although it does have one 
feature (strong-named assem- 
blies) for managed code, it is pri- 
marily helpful for native code C 
and C++ developers," said Mike 
Gualtieri, a senior analyst with 
Forrester Research. 

BinScope can be run as a 
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standalone tester or can be inte- 
grated with Visual Studio 2008. 
Its output can be pulled into 
Team Foundation Server to con- 
vert errors into work items for 
corrections, and for a final secu- 
rity review process, said 
Microsoft's Ladd. "We make 
tools that play well together." 

MiniFuzz runs fuzz tests, 
which look for unexpected 
application behaviors that could 



lead to vulnerabilities. 

Code runs through different 
flow patterns that identify 
whether the resulting crashes 
should be investigated as 
potential security risks in appli- 
cations. The more variations 
developers test, the more 
effective the results are, Ladd 
said. "We are finding that peo- 
ple are not fuzzing. It produces 
measurable results that will 



Top 10 architecture mistakes 



< continued from page 1 

communicators. You need 
someone with guts and passion. 
If they know architecture, this 
is very good too. You can teach 
someone architecture relatively 
quickly, but you can't teach this 
other stuff. They are learnable, 
but it usually takes longer, so 
double-down, or compliment 
your own weaknesses with 
team members that have 
strengths in those areas and 
plug them in where those 
things are needed." 

People skills are at the cen- 
ter of pitfalls number two and 
three as well. Bittler said that 
good architects make sure 
they've got everyone involved 
on board, especially the stake- 
holders and business people 
who will be using the software 
when it is completed. 

Bittler said he created this 
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list, which he will discuss at 
October's summit, to help pre- 
vent the most common prob- 
lems he encounters while con- 
sulting with development teams. 
"We find folks come looking 
for the best practices, but I am 
doing this pitch because I am 



saying, 'Hey, take care of avoid- 
ing the fundamental pitfalls 
before you go after some of the 
upper reaches of the fruit on 
the tree.' It's a lot easier to 
avoid the pitfall than to climb 
out of the bloody hole," said 
Bittler. I 



reduce the attack surface for 
their software." 

Like BinScope, MiniFuzz 
can be run standalone, or 
plugged into Visual Studio 2008 
or Team Foundation Server. 
Both tools are available from 
MSDN and the SDL tool 
repository. 

Gualtieri said that BinScope 
and MiniFuzz demonstrate 
Microsoft's continued commit- 
ment to make the SDL process 
"real for developers," but cau- 
tioned that there is no silver 
bullet to address developer 
ignorance about how to develop 
secure code. "Development 
shops must understand the 
entire SDL process first and 
then use the tools help them 
through the process," he said. 

To help address that prob- 
lem, a new Microsoft white 
paper, "Manual Integration of 
the SDL Process Template," 
describes how to use the SDL 
process with a development 
team's existing process, Ladd 
said. "We encourage developers 
to evaluate BinScope, Mini- 
Fuzz and other SDL tools and 
see if they make sense in your 
life cycle." 

There is no "silver bullet" to 
get security into the software 
development life cycle, but 
developers can add a sense of 
predictability that makes secu- 
rity problems easier to find with 
an SDL-like process in place, 
Ladd said. I 



Linux may 
be unified 
by Mobile 

< continued from page 1 

software. Your bottleneck in this 
market is not necessarily porta- 
bility. It's the cost of the com- 
mercial support relationships 
that are structured around the 
software," said Zemlin. He went 
on to say that, aside from stan- 
dards, Linux also needs testing 
frameworks and tools to validate 
compatibility across distribu- 
tions and versions. 

Zemlin said that the Linux 
Standard Base has helped to 
bring consistency to many 
disparate Linux distributions. 
But Mark Shuttleworth, CEO of 
Canonical, the company behind 
Ubuntu Linux, said that stan- 
dards alone will not fix the prob- 
lem. He said that fragmentation 
is a big issue for Linux. 

"I think the Linux Founda- 
tion played a very important 
role in the ecosystem," said 
Shuttleworth. "They speak very 
powerfully for the whole Linux 
commercial community. They 
provide a single response to the 
moves and commentary that 
comes from proprietary players. 
They also are a neutral force for 
collaboration. They've led some 
significant efforts. They lead a 
big effort around the automat- 
ed testing of Linux. They orga- 
nize a lot of conferences that 
bring major players from 
brands and interest groups 
together. I think they play an 
important role, but I think 
unfragmenting Linux by any- 
thing other than market forces 
is unlikely." 

Zemlin hopes that new 
efforts in the mobile space will 
foster a move toward common- 
ality, however. He said that he 
hopes the Moblin project, 
which is based on the Linux 
Standard Base, helps to push 
the fledgling mobile space to 
evolve into a more cooperative 
Linux ecosystem. 

Zemlin expressed great 
hope for a more unified Linux 
in the mobile world. "We've 
released the 4.0 version of that 
specification. Everyone in the 
process has already implement- 
ed that. I think what you're 
going to see over the next few 
months is more news about 
that framework being used in 
the mobile space." I 
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"Excellent instructors and great course selection. 
This is a must-attend." 

Bob Walter, Systems Administrator, Porter Novelli 

"Awesome coverage of SharePoint. SPTechCon is a great 
place to learn and network with SharePoint Gurus." 

Devendra More, Associate Business Systems Analyst, CA Inc. 

"The conference was worth the price, and I would 
attend again." 

Jon Gebarowski, Web Development Manager, SeaChange Int'l 

"Lots of good stuff for various levels of SharePoint folks." 

Joel Dylhoff, Systems Architect, Ashley Furniture 
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Is your build process a little outdated? 




The weak link in most software development infrastructures is easy 
to spot: it's that bottleneck known as the build-test-deploy process- 
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not Just compile 



and Package 



Agile development is 
changing the way 
software companies 
design their tools 




BY JEFF FEINMAN 




uild management: It's not just 
compile and link anymore — 
coding and quality standards 
have become an indispens- 
able for agile development, 
experts say. 
Compile and link is a key step in con- 
tinuous integration where code is com- 
piled into binary code and linked to 
build a program. Traditionally it was the 
norm to run this process once every sev- 
eral days or weeks during a software 
development project. 

But agile development encourages 
frequent changes of source code, and 
the present compile-and-link process 
needs to be able to rebuild applications 
frequently. Not only that, but todays 
build management has also grown to 
involve tasks such as running static 
analysis to prevent quality problems, or 
running unit tests and code coverage. 
"There's more to build management 



today from various angles," said Maciej 
Zawadzki, president of Urbancode. "Build 
management now is used to enforce cod- 
ing standards and quality standards, so 
because of that, a build actually does more 
than just compile and package." 

As all these tasks are incorporated 
into build management, and with agile 
development gaining more and more 
popularity, build management is clearly 
becoming more complex. 

Tracy Ragan, COO of OpenMake 
Software, called the term build manage- 
ment "diluted." She agreed that, histori- 
cally, build management consisted of the 
compile-and-link process, but she noted 
that some companies that currently sell 
build management software offer mostly 
just job scheduling functionality that 
allows development teams to chain 
together their application life-cycle 
management tasks. 

"For example, a workflow tool lets 
you create checkouts, and as soon as 



your checkout process is completed, 
your build scripts go and execute; when 
that's done, you can do your testing or 
static code analysis," Ragan said. "Those 
workflow tools don't drive into any one 
of those activities and improve the per- 
formance of the activity, they simply do 
as they're told and execute them." 

Dave Locke, IBM Rational's director 
of marketing, said that compile and link is 
the lightest-weight approach to build 
management. Build management can also 
tie into agile development by automating 
heavyweight activities like static analysis 
and disaster recovery planning. 

"Part of being agile is freeing up the 
people who need to be freed to be more 
creative and faster in iterations," Locke 
said. "Build management can give you 
lightweight or heavyweight relief for 
deploying your code." 

LOSING THE STATIC 

OpenMake's Ragan said the biggest 
problem with agile development is build 
management, because agile developers 
manage the compile-and-link process 
with static scripts. Static scripts worked 
very well in the waterfall method 



because development managers would 
run builds once a week, and they had 
time to tweak the build scripts to make 
sure they were correct. 

"The reality is that the source code 
changes, but the scripts that support 
the compile-link process don't," Ragan 
said in talking about the waterfall 
method. "So you have to have a human 
sitting in between them to say, 'We're 
going to update the scripts so it match- 
es the new code.'" 

Agile development has built a "supe- 
rior process" when it comes to compiling 
and integrating frequently, instead of 
doing that on a weekly or bi-weekly basis 
like in traditional development, Ragan 
said. By compiling frequently in a con- 
tinuous integration build, a develop- 
ment team can ensure that developers 
are coding in unison. 

Jeffrey Frederick, a technical evange- 
list with Urbancode, noted that agile has 
increased the pace of development, as 
developers are doing several builds per 
day, rather than one per week as was the 
norm in the past. With many manual 
tasks like testing being automated, 
development teams need to keep pace 
with the faster development times. 

"If you're going to release every cou- 
ple of weeks or have a releasable prod- 
uct every 30 days, you can't have a man- 
continued on page 32 ► 
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ual deployment process that only hap- 
pens once a week," Frederick said. "If 
you have an activity where you could 
previously do it once a month, and now 
you're doing it once every 30 minutes, 
that's gonna cause some problems." 

In addition to increasing the pace of 
software development, agile has a 
"broader view" of getting software to 
customers, Frederick said. Traditional 
development organization tended to 
focus on writing the software, and the 
schedule ended when the software was 
finished. For the most part, staging and 
production were tasks handled by oper- 
ations professionals. Agile teams, mean- 
while, are more focused on how the soft- 
ware is being valued by the customer 
and will only consider a feature done 
when it is being used. 

"This means that agile teams are 
more likely to coordinate with opera- 
tions people early in the project to 
ensure a smooth transition from the 
test environments to the production 
environment," Frederick said. "The 
most advanced agile teams not only 
involve operations early, they use the 
same deployment technology across the 
life cycle, so that any possible deploy- 




The reality is that 
the source code 
changes, but the 
scripts that sup- 
port the compile- 
-'; process don't.' 

-Tracy Ragan, 
OpenMake 



ment problems are caught early and 
fixed early." 

GETTING THE RIGHT TOOLS 

There may be different viewpoints on 
what build management is all about 
today, but one thing is clear: Agile devel- 
opment is one of the main drivers in how 
software companies are designing their 
development tools. 

Usman Muzaffar, vice president of 
product management for Electric 
Cloud, said the greatest strengths of 
Electric Cloud's build managers, Elec- 
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tricCommander and ElectricAccelera- 
tor, are their ability to handle complexi- 
ty. Electric Cloud's software handles 
complexity well 

because the company 
employs many people 
that have experience 
working in parallel 
development environ- 
ments, he claimed. As a 
result, ElectricCom- 
mander gives builders 
the capacity to specify 
what parts of their 
process can be used for 
parallel development. 

"What people encounter when they 
try to move to agile is that there's a 
tremendous amount of moving parts and 
a lot of variance in the build," he said. 
"There's a reason why these things aren't 
that easy to script and automate, and 
what you need is a tool that can handle 
that complexity without asking you to 
change your process." 

Electric Cloud is also very good at 
parallelism, Muzaffar claimed, and 
knows problems that are inherent with 
distribution across many different sites. 
Electric Cloud's build managers can 
scale to large teams. 

Muzaffar called build management 
the "low-hanging fruit" for agile. 

"Agile is all about, 'How can we get 
working code to be the representative of 
the state of the project?' " he said. "The 
simplest thing you can do is get that 
build churning constantly, so that 
through every phase of this life cycle as 
check-ins are happening, you have some 
sense of how you're doing. 

"To do that, you need to be able to 
come up with a system that's going to 
automate [check-ins] for you, but the 
challenge is it's too hard to automate 
because the tools out there are too sim- 
plistic. They can't model the complexity, 
and even if they could model parts of it, 
they can't tie it all back together." 

IBM's Rational line also caters to 
agile development, with the Jazz-based 
Rational Team Concert and the Build 
Forge build manager. Build Forge helps 
software development teams automate 
and standardize repetitive tasks. A job 
process optimization feature runs build 
management tasks automatically, while 
project configuration 
snapshots manage various 
project configurations in 
order to reuse them and 
share information among 
different project teams. 
Additionally, Build Forge 
can integrate with Team 
Concert, which Locke 
said makes it easier to 
automate software devel- 
opment projects created by globally dis- 
tributed teams. 



"Build Forge is a sophisticated 
process automation engine where you 
have this sequence of steps that you 
need to do to get your product out," 
Locke said. "That sequence can be as 
light as compile and link, or as complex 
as need be. Build Forge can obviously 
integrate most tightly with other Ratio- 
nal products, but it can integrate and 
help you automate anything you need to 
run as part of your build process." 

Locke added that Build Forge can 
notify build managers of when unit tests 
are complete so that a build is ready to 
be run. 

OpenMake s Meister build manager, 
meanwhile, can integrate build services 
into IDEs and automatically generate 
scripts after interrogating IDE project 
files. According to Ragan, scripts for 
IDEs like Apache Ant or Maven are 
manually coded by humans. 

"The reason why that's important is 
because it moves away from the static 
nature of build scripts," Ragan said. "As 
an agile developer wanting to do a check- 
in and then a compile, Meister can say, T 
know that all of these other objects are up 
to date, and I'm only going to rebuild 
what's out of date.' Because Meister is 
managing the logic in the compile and 
link process, it can recompile any objects 
that have been changed." 

Though tWorks, an agile software 
consulting company, looks at continu- 
ous integration as a model that is made 
up of build and continuous compila- 
tion, unit testing, functional testing, 
and automation and deployment. The 
company has a release manager called 
Cruise that "pushes changes live all the 
way through the battery of validations 
that need to be made before it goes 
into production," said Cyndi Mitchell, 
managing director of ThoughtWorks 
Studios. 

"One of the things we've done with 
Cruise is create an environment for 
developers to work, collaborate and 
define the process by which software 
will be pushed live into production. This 
drives out what the nonfunctional 
requirements are: where are the data- 
bases, what sorts of data migrations do 
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we need to do, and those sorts of things." 
Cruise applies what Mitchell called 
a grid concept to a project's data, allow- 
ing tests to run on any available node, 
hardware or virtualized machine. 
Cruise can keep test feedback short by 
running automated tests on the build 
grid, and by running work in parallel on 
multiple platforms. 

Some companies out there don't 
offer specific build management soft- 
ware, but integrate with open-source 
build managers. TIBCO's Active Matrix 
SOA platform, for instance, can inte- 
grate with the Apache Ant Java builder. 



"We didn't try to reinvent the wheel, 
where we thought the wheel was suffi- 
ciently round and worked well," said 
Rourke McNamara, director of product 
marketing for TIBCO. 

Urbancode also focuses greatly on 
third-party integration with the newest 
version of its AnthillPro continuous inte- 
gration server, integrating with security 
software from Fortify and Klocwork, 
along with open-source tools Check- 
style, FindBugs and PMD. Zawadzki 
said AnthillPro now integrates with over 
50 third-party products. 

AnthillPro is made up of three main 
features. It brings process automation, 
which Zawadzki admitted is an expect- 
ed build feature and not unique to 
Urbancode. 

The second feature 
is pipeline manage- 
ment, which links 
together the build, 
functional testing and 
QA processes. 

"For example, build 
processes are pretty 
easy. We have a defined 
input and output," 
Zawadzki said. "But 
how about running functional tests? 
That has to actually be chained to some- 



'Build management 

now is used to 

enforce coding 

standards...a build 

does more than 

just compile and 

package/ 

—Maciej Zawadzki, 
UrbanCode 
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ge- ThoughtWorks' Cruise release manager can keep test feedback short by running automated tests. 



thing because it doesn't make sense to 
just run functional tests. They need to 
be connected to the build process 
beforehand, because the build process 
produces the artifacts that the other 
processes are going to deploy." 

The other main feature in AnthillPro 
is data aggregation and correlation, 
which manages the data exchanged 
between AnthillPro and integrations 



with third-party software. 

It's common knowledge that agile 
development is growing in popularity 
as software companies try to shrink 
their production times, and as develop- 
ment teams grow in size and complexi- 
ty. With the correct build management 
software in place, the intricacies of 
the agile approach can be harnessed 
quite well. I 




The Next Wave in Agile Methods 



Achieving the ten minute build is a goal that is critical for 
supporting a consistent and reliable continuous integration 
process. But how real is this goal? OpenMake Meister, the next 
wave in build automation, can accelerate your software compile 
process allowing you to achieve both fast and accurate builds. 

Yes, the 10 minute build is possible with Meister! 



See for yourself by downloading a trial of Meister today from 

www.openmakesoftware.com 
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FROM THE EDITORS 

The CodePlex gambit 

The CodePlex Foundation — set up by Microsoft as a repository of 
open-source software — presents a conundrum for the open-source 
community and for Microsoft developers alike. 

The company's history with open source has ranged from malignant 
neglect to outright hostility Over the past decade, Redmond executives 
have fought to subvert open-source projects, most notably Linux, using 
every technological, legal and marketing tool in their billion-dollar tool- 
box. Microsoft has earned everyone's skepticism. It is fair to suspect that 
CodePlex represents not a genuine acceptance of open source, but is yet 
another attempt to undermine or co-opt it. And indeed, we are skeptical. 

Let there be no doubt: Microsoft is setting up CodePlex because it's 
good for Microsoft's bottom line. 

Yet, to be fair to Microsoft, every major software company's relationship 
with open-source software is based on business plans, not pie-eyed altru- 
ism. Other big companies, from IBM to Sun to Oracle, have contributed 
cash and personnel to open-source projects only because it makes sense to 
do so. From that perspective, Microsoft's spin-off of CodePlex into an 
independent foundation may be little different than what IBM did with 
the Eclipse Foundation, or Sun with the NetBeans community. 

Still, despite the fact that the CodePlex bylaws don't mention 
Microsoft, we are troubled. The CodePlex Foundation is completely 
dominated by the company. Its acting president, vice president, treasur- 
er and one other board member are Microsoft employees (though the 
acting president, Sam Ramji, has announced his forthcoming departure 
from Microsoft). The two non-Microsoft board members, Miguel de 
Icaza and Shaun Walker, are Microsoft loyalists. 

If Microsoft's intent is to provide an organization that's solely for its 
business partners and for individuals to participate in open-source pro- 
jects that support and advance the Microsoft platform, there is nothing 
wrong with that. Let the company be clear and admit it. 

If the company's goal is to support open source — and that would tru- 
ly be shocking — then we'll expect to see the evolution of an independent 
board of directors and projects that reflect a broad view of the open- 
source community, and not merely promote the Microsoft platform. 

Software architects are people too 

We all know the type: a brilliant programmer who lives in a world of 
code, spends his weekends writing robotics software, and leads the 
team in code contributions and bug fixes. Naturally, this fellow deserves 
a promotion, and with his extensive knowledge of C+ + , Java or .NET, 
he'd make a great manager. Or so the common thinking goes. 

But as Gartner shows with its top 10 enterprise architecture pitfalls, 
this amazingly intelligent fellow may not be the best choice for heading 
up the new project as its chief architect. 

Extreme competence in programming often is accompanied by a lack 
of social skills. It's certainly not a hard and fast rule; we all know some 
amazing programmers are also gifted communicators and competent — 
or inspiring — leaders of men and women, able to bridge the divide 
between business units, and proven to win the confidence of everyone 
from the CEO to the offshore test team. 

If you are lucky enough to employ such a man or woman, congratula- 
tions. You've found your project leader. Just be careful not to choose as 
your chief architect someone who is technically brilliant but unable to 
grasp or succeed in the business, personal and political minefield known 
as enterprise architecture. 

It is a hard lesson to learn, but if you want to save yourself a bundle a 
day in consulting fees, take the time to watch how your newly promoted 
architect handles people in the next project meeting. If your teams are 
lacking in motivation, and if the programs begin missing deadlines after 
only a few weeks, you can place even money on who that expensive con- 
sultant would blame for the failure. I 



LETTERS TO THE EDITOR 

Development estimates: 
A rebuttal 



Interesting article (Zeichick's Take: 
McCarthys Four Laws of Software Esti- 
mation), and a little bit funny to read. I 
do have some thoughts, though... 

I work on a corporate development 
team, and I shudder at the words, 
"Developers are really bad at guessing 
how long it takes to write software." In 
my experience, competent developers 
do not guess coding times. A business 
specification should be constructed by a 
business analyst prior to any estimates 
being prepared. This document defines 
the requirements that must be met for 
the project to be successful. 

After the requirements are reviewed, 
an initial estimate can be provided, but 
an accurate estimate can only be made 
after a technical design document has 
been completed. At this point, we are no 
longer guessing, but rather estimating. 
In my experience, our estimates are fair- 
ly accurate, and we usually finish pro- 
jects on time, unless we encounter that 
dreaded phenomenon, scope creep. 

At times, I am asked by my customers 
to provide SWAG estimates based on 
sparse information, but I always qualify 



my response by stating that we will need 
a complete list of requirements before 
an accurate estimate can be provided. 

Another thought: If a "developer" 
provides a different estimate for enjoy- 
able vs. tedious projects, that developer 
should not be providing estimates. 
Period!!! 

Lastly, although I don't know Michael 
"Mac" McCarthy, as a project manager, 
maybe he should ask the right questions 
and request an estimate of work, not a 
guess at how long something will take. 
The thought is, if the project is unsuc- 
cessful (i.e., behind schedule), the man- 
ager of the software project (your friend 
Mac) probably deserves most of the 
blame. Something to chew on next time 
one of his projects is behind schedule; 
he should use his powers of observation 
to look inward. 

Gordon Imrie 

MSN 



Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



Companies put focus on DATA WATCH 
new product development 

Seventy-one percent of companies are pointing to product development as their 
No. 1 priority, according to survey figures from SoftServe, an application development 
company focused on helping ISVs. More than 6,000 senior software development 
professionals were surveyed, according to SoftServe. 





71% of respondents 
listed new product or 
software development 
as a top priority for 
their organization 



51% said cost and 
expense cutting 
is a top priority 



49% said improving 
usability for the 
end user is 
a top priority 



[ : 



of companies did software customization and integration 
sing Microsoft Dynamics/SharePoint 




Source: SoftServe 
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We need a broader view of interoperability 



Wayne Citrm 




Like many in the developer commu- 
nity, I listened with interest to 
Microsoft's JavaOne keynote, in which 
they presented their vision for 
.NET/Java interoperability. I came 
away disappointed, but unfortunately 
not surprised. Their proposed solution, 
as it has been ever since Microsoft and 
Sun started talking about interoperabil- 
ity, was Web services. But 
Web services are not interop- 
erability. They are intercom- 
munication. 

Consider a world where 
Web services didn't exist. 
Microsoft and Sun could have 
accomplished the same thing 
by having their .NET and 
Java components communi- 
cate through sockets, or 
through databases, or through 
text files in shared folders. Nobody 
would consider these solutions to be 
interoperability. These are mechanisms 
for sharing data or sending messages 
between self-contained components: 
intercommunication. That's fine if all 
you want to do is share data or send mes- 
sages. But interoperability can be so 
much more. 

True interoperability between Java 
and .NET is the ability to access any 
Java-based entity (e.g., an object, class or 
method) from .NET code, or vice versa. 
It's the ability to substitute something 
written in Java anywhere one would 
ordinarily use something written using 
.NET technology. 

For example, what if you wanted to 
create a .NET-based component that 
would send and receive messages from a 
Java Message Service server? Or what if 
you wanted to use a .NET-based library 
in an application that was otherwise 
written in Java? Or what if you wanted to 
embed a Windows Forms control inside 
an SWT-based application? 

Using a Web service wouldn't be an 
appropriate solution for any of these 
problems, and it's not possible to use 
Web services to intermix user interface 
technologies. Only a true interoperabil- 
ity solution can solve these kinds of 
problems. 

There are a number of technologies 
that can be used to implement true 
interoperability between Java and 
.NET, but I won't go into them here. A 
Web search will yield plenty of infor- 
mation. It's important to point out, 
though, that a broader notion of inter- 
operability can lead to many advantages 
over Web services: 

• True interoperability is faster. Web 
services are tied to verbose XML and to 
HTTP. Interoperability solutions don't 
have to be tied to these technologies 
and can be used to exchange message 
that are much more compact, over 



transport mechanisms that are much 
more efficient. 

• True interoperability is more flexi- 
ble. To have a Web service, you need to 
implement a server. If you're accessing a 
simple library, implementing a server is 
overkill. Interoperability solutions can 
be used to allow Java and .NET to talk to 
each other without implementing a spe- 
cial server. The Java and 
.NET can even run inside the 
same process. Many different 
architectures can be support- 
ed; with Web services, you 
just have the Web services 
client and server. 

• True interoperability 
has a broader reach. You can 
only interoperate using Web 
services if you implement a 
U> Web service, or if the com- 
municating components are Web ser- 
vice-enabled. In many cases, the com- 
ponents are not Web service-enabled, 
and it is technically unfeasible or orga- 
nizationally impractical to modify the 
components to implement a Web ser- 
vice. Technologies implementing true 
interoperability do not have these 
restrictions and can be used with 
unmodified legacy code. Source code 
may not even be required. 

• True interoperability provides more 
functionality. If you need to expose an 
entire object-oriented API between 
platforms, a Web service isn't the 
answer. At best, you can expose a few 
services. The goal of true interoperabili- 
ty is to make anything available across 
the platform boundary. Web services 
don't let you do that. 

• True interoperability increases 
choice and lowers cost. As a developer, 
you can choose the platform that best 
solves the problem you're working on; if 
Java is better at solving one part of the 
problem, and .NET is better at solving 
another part, you can use both and have 
them interoperate. As a development 
manager or software purchaser, you can 
choose between more software products 
since you can now consider both .NET- 
and Java-based products. More products 
and vendors mean more competition, 
and that means lower costs. 

• True interoperability expands your 
market. As a software vendor, your 
.NET- or Java-based product could only 
be purchased by customers who were 
themselves creating software using 
.NET only or Java only. With true inter- 
operability, you can sell to both .NET- 
and Java-based customers, and your 
potential customer base doubles. 

Proponents of the Web-services 
approach may claim that true interoper- 
ability requires knowledge of both the 
.NET and Java platforms, while using 
Web services requires only that one 



know how to invoke a Web service on 
the consuming platform. This is actually 
a misleading argument, since you gener- 
ally don't need to know how to code on 
the other platform in order to employ 
interoperability, you only need to know 
how to access classes in the target API. 
Instantiating objects, calling methods 
and accessing fields is the same in Java 
as it is in a .NET language like C# or 
VB.NET. The only necessary new 
knowledge is the knowledge of how to 
use the API, which is useful knowledge 
in any case and no different from knowl- 
edge of how to use a service exposed as 
a Web service. 

True interoperability, then, is more 
powerful than the intercommunication 
provided by Web services, offers a 
number of business benefits, and is no 
harder to use than the equivalent Web 
service. With those advantages, it 
makes sense for true interoperability to 
be part of any cross-platform program- 
ming strategy. 

We really shouldn't blame Microsoft 
and Sun too much for focusing on inter- 
communication and, in particular, on 
Web services. Microsoft and Sun are 
each heavily invested in their respective 
platforms and, to achieve something 
they call interoperability, have chosen 
to meet each other halfway through a 
neutral, technology-independent stan- 
dard that can be implemented on both 
platforms. 

Since both .NET and Java implement 
Web services, it's straightforward to 
adhere to standards and implement an 
intercommunications mechanism. For 
many applications, that's useful and 
those technologies should be used. But 
let's not pretend that that's all there is to 
interoperability, or that accessing a Java- 
based Web service from .NET — or a 
.NET-based Web service from Java — is 
all we can do. 

If we do so, we not only do the 
entire developer community a disser- 
vice, we also limit the potential solu- 
tions we can create, and the ways in 
which we can combine components and 
technologies to solve problems. If we 
keep in mind that interoperability can 
be much more than simple intercom- 
munication, and if we use true interop- 
erability technologies, then the .NET 
and Java platforms can become even 
more useful and powerful. I 

Wayne Citrin is CTO of JNBridge, 
which sells solutions for bridging Java 
and .NET applications. 
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An interactive program is one in 
which the program pulls input from 
the environment: System. Console. Read- 
Key(). A reactive program is one in 
which (after an initial wiring-up) the 
environment pushes input to the pro- 
gram: myKeyPressEventHandler(Object 
sender, KeyPressEventArgs e) { . . . etc . . . 
}. Today most programmers mostly write 
reactive programs. 

The reactive style is a good fit for 
programs that wish to remain active 
while waiting for a particular input 
event. In other words, it's a good fit for 
applications with GUIs and for Web 
pages seeking that AJAX-y goodness. 
("Functional reactive programming" is 
more mathematically rigorous and 
involves not just events but continuously 
varying valuables.) 

The reactive style requires more set- 
up, but it allows for the program to more 
easily do other things while waiting for a 
particular input event. The success of 
AJAX is testament to the perceived ben- 
efits of the reactive style. It combines 
JavaScripts event-handling mechanism 
with the slow Web query callback mech- 
anism, but nonetheless applications 
written with AJAX are generally seen by 
users as more responsive because they 
don't involve a whole-page refresh. 

While the market has voted in favor of 



Chain reactive 

the end result of the reactive style, the 
plumbing beneath such a Web-based 
application is a mess. Such applications 
are very likely running JavaScript to 
dynamically power the UI, a server-side 
language such as C# to describe the busi- 
ness logic, and SQL to describe its persis- 
tence model. 

Even if you put the pro- 
gramming language aside, the 
data models at hand are con- 
fusing. The display inside the 
browser is based on a Docu- 
ment Object Model. Complex 
data flowing over the Web is in 
another hierarchical text-based 
format, either XML or JSON. 
Business logic running at the 
server is likely working with a 
directed graph of objects. Per- 
sistence, for most of us, is a combination 
of filesystem objects and relational data 
described with SQL. 

Language Integrated Query (LINQ) 
has been a success in bridging these dif- 
ferent models. If you've spent some time 
with LINQ, you understand that while it 
can be supported by the programming 
language, the core of LINQ is an elegant 
set of interfaces that can be implemented 
and extended against all sorts of models, 
including computational models. Basical- 
ly, if it's IEnumerable, it's LINQable. 




People have done clever things in par- 
allelizing operations against enumerable 
collections. Parallel LINQ (PLINQ), for 
instance, provides an "opt in" model for 
parallelizing queries. You specify that a 
source should be treated AsParallel(), and 
subsequent query operators bind to the 
PLINQ infrastructure, hiding the same 
kinds of complex analysis and 
transformation that one thinks 
of a DBMS performing in a 
different context. 

LINQ is all well and good, 
but we don't generally think of 
a person interacting with a 
Web page as having much to 
do with enumerable collec- 
tions. Just the opposite, we 
think of it as events (the user 
selects a new option for their 
asynchronous computations (the 
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car), 

price and tax are calculated), and more 
events (the UI is updated to reflect the 
new total). We don't think of the IEnu- 
merable interface and the Iterator pat- 
tern, we think of an interface with some 
type of OnUpdate() function and some 
variation of the Observer pattern. 

Leave it to Erik Meijer (sometimes 
called "the father of LINQ," and recent 
recipient of an award from Microsoft for 
"Outstanding Technical Leadership") to 
prove that IEnumerable/IEnumerator 



can be mechanically transformed into 
IObservable/IObserver classes. Leave it 
to Erik Meijer to present his proof in the 
form of throwing coins at PowerShell 
Architect Jeffrey Snover and Edinburgh 
University's Philip Wadler. 

That iterators and observers are 
mathematical duals may seem clear in 
retrospect, but it may equally seem 
"unremarkable." But by implementing a 
bridge between the two, Meijer says, 
"We have reduced writing asynchronous 
programs into writing queries." 

Meijer demonstrates LINQ-to-events 
with a trivial application. Code looks 
like "var inputValues = from i in 
Input. Get KeyUp() select i.Value();". In 
combination with some Volta "declarative 
tier splitting," Meijer presents an AJAX- 
based dictionary lookup program in half a 
dozen lines of code and summarizes: 
"IEnumerable/IEnumerator: prototypi- 
cal interface for interactive collections 
and interactive programs. IObservable/ 
IObserver: prototypical for observable 
collections and reactive, asynchronous 
and event-based programs." 

An early version of Microsoft's Reac- 
tive Framework implementing LINQ- 
to-events is included in the Silverlight 
Toolkit. 

Reactive programming. Because 
LINQ is so 2006. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 



Dispelling the cloud hype 



If you're to believe the hype, you're 
already behind the curve if your orga- 
nization is not actively deploying apps on 
the cloud. At the recent VMworld 
tradeshow sponsored by VMware, the 
theme of the show and its numerous ses- 
sions was cloud computing. Many pre- 
sentations and vendors took the curious 
position that the leap from virtualization 
to the cloud is a small one. And vendors 
that did not exist 18 months ago were 
holding forth on the benefits and chal- 
lenges of cloud computing. I haven't 
seen this much hype about a technology 
that enables you to do what you're 
already doing since the days when SaaS 
was the new hot thing. 

Experience tells me that one symp- 
tom of insubstantial realities is the pres- 
ence of multiple definitions of the core 
concept. You'll recall the original cloud 
image referred to a large, non-specific 
network of systems, such as the Internet 
or private networks. In this model, com- 
puting takes place on some machine 
without you knowing exactly which. The 
term referred initially to external clouds, 
that is, ones outside the firewall. 

But confusion soon arose around this 
usage. Some described it as something 
akin to Amazon's EC2, others to SaaS. 
However, it was clear either way: This 



model was not likely to capture enterprise 
attention on a large scale (a view proven 
correct by the small size of the SaaS mar- 
ket despite years of aggressive marketing 
and the still very experimental view of 
Amazon's services). So, the term migrated 
inside the firewall, where it remains today. 
For most purposes, cloud computing 
refers to this private cloud concept. 

The difficulty with cloud 
computing defined this way is 
that it lacks compelling use 
cases. There are some, which 
I'll get into shortly, but they are 
not the kind that are going to 
lead data centers en masse to 
build clouds for existing needs. 

The private cloud makes 
brilliant sense for the manage- 
ment of transient systems. 
These are systems that are 
used for product development, testing 
(especially!), research projects, tempo- 
rary deployment of non-mission-critical 
applications, and the like. Their needs are 
well served by a large pool of hardware in 
which virtual machines can be configured 
quickly, run, saved if necessary, and torn 
down when they're no longer needed. 

Products like VMware s Lab Manager 
(and competing products from Skytap, 
Surgient and VMLogix) enable this use 
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case. They all provide ways of taking 
snapshots of multi-VM configurations for 
saving and restarting at a future date, 
with archiving functions to manage these 
configurations. The products also enable 
multiple instances of the same configura- 
tion to run simultaneously, by perform- 
ing NAT and MAC-address translation to 
avoid network collisions. 

This is an excellent use of 
virtualization and so-called 
cloud computing. The key is 
the temporary nature of the 
projects running on the plat- 
forms. 

Turning to permanent 
applications that run on static 
systems: What advantages 
does the cloud confer on 
them? The answer is very 
few. One that is frequently 
touted is scalability. Let's examine this. 

Most permanent apps run on dedicat- 
ed hardware that has been scaled appro- 
priately. Apps that require great scalabili- 
ty run on clusters. Clusters, however, are 
cheap to expand. Dual-Xeon boxes — the 
node box of choice, it seems — are inex- 
pensive and available from innumerable 
sources. For such apps, cloud scalability 
provides little advantage. And in the 
absence of knowing whether cloud infra- 



structure can handle failover well, not to 
say distributed caching, it's hard to see 
what big plus the cloud brings. 

Another touted advantage is the ener- 
gy-savings aspect. If apps are run on a 
pool of machines, the unused bandwidth 
and hardware can all be put to use. This is 
a good argument for virtualization: Con- 
solidating small apps onto a single server 
is a convincing "green" use case. And cer- 
tainly, these apps can be put on a cloud. 

However, by tying apps to a specific 
server, you can make sure that no two 
apps will compete intensively for the same 
I/O device, and likewise you can make 
sure that the apps in toto have enough 
resources should several of them have 
simultaneous usage spikes. In the cloud, 
you have no such guarantee, because the 
apps can be running on any machine. 

Despite my reservations regarding 
cloud computing, I think it will continue 
gaining traction, but not nearly on the 
scale that its exponents claim. It will fill 
the use cases I mentioned and will work 
fine for running small, non-demanding 
apps. Small businesses will find external 
clouds a satisfactory model (when prices 
come down further). However, for enter- 
prise IT organizations, I expect a very 
slow adoption process — certainly slower 
than virtualization's adoption rate. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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Short take 



EUCALYPTUS SYSTEMS is my new 

favorite startup. Only a year or so since 
they first formed to build an installable 
environment that could mimic Amazon s 
cloud, Eucalyptus can be installed right 
now. Perhaps it's because Eucalyptus 
seems to have more doctors on board 
than non-doctors, as a company. Those 
Ph.D.s can really churn out the code 
when given an interesting new project. 
The heavy lifting is nearly complete, and 
by next month, external contributors 
should already be knee deep in the 
open-source code behind Eucalyptus. 
When the community gets going, expect 
to see some wild new ideas in the cloud. 
— Alex Handy 

WHEN THERE'S A NATURAL DIS- 
ASTER, be it an earthquake, tsunami or 
outbreak of virus, there is an urgent need 
to interact with millions of people to col- 
lect data, sort it, make it retrievable, and 
get it out to a response team, which 
might also be a large number of people. 
As the world braces for the upcoming flu 
season and a possible outbreak of H1N1 
virus, a company called GoScan 
is working with U.S. government agen- 
cies to help ensure 
that health docu- 
ments get into the 
hands of people 
working to fight the 
spread of the virus. 
GoScan s technology 
enables doctors and 
hospitals to scan 
PDF forms with information such as a 
person s date of birth, location, gender, 
allergies and other medical conditions to 
a central repository. The form processing 
software generates XML metadata that 
then can be searched via SharePoint, and 
a medical response can be coordinated, 
such as whether the person can take a 
preventative vaccine or other medica- 
tions. "States want to make decisions 
quickly," said Mike Stuhley, CEO of 
GoScan. "They don't want to appear like 
another Hurricane Katrina response." 
— David Rubinstein 

MICROSOFT HAS SHOWN that it is 
serious about having its customers learn 
and use a security process throughout 
the development life cycle. Larger orga- 
nizations have the resources to integrate 
Microsoft's security tools into their 
development requirements, and those 
organizations could help bring this type 
of process to the masses. Big vendors 
like Microsoft and IBM have a duty to 
make security one of the cornerstones 
of programming. The industry's blind 
eye to insecure development practices 
is over. 

— David Worthington 




Prepare for the 
desktop update onslaught 



Note symptoms. Search for them on 
Google. Download update or apply 
fix. Test results. Rinse, repeat. Wait for 
the next problem to appear. 

That's been my life for several days in 
September after updating my MacBook 
Pro to Mac OS X 10.6 Snow Leopard, 
the minor update to Apple's 
desktop operating system. 

There are some nice benefits 
to Snow Leopard, and the 
update didn't take long to install. 
The new software generally 
worked well right out of the box. 
Even so, I've spent quite a lot of 
time fixing things, including one 
critical app that simply didn't 
work. I've been installing 
updates to utilities and diagnosing perfor- 
mance problems ever since. 

Bear in mind that Snow Leopard tru- 
ly is a very minor update, and I'm an 
unabashed Mac expert who can solve 
problems on my own. 

Now imagine what happens when 
Windows 7 hits the market. Granted, 
many organizations are going to be slow 
and cautious when updating their Win- 
dows Vista and Windows XP desktops to 
Windows 7. That's the way it should be. 
Even so, any desktop upgrade means 
headaches for IT administrators, help- 
desk staff, and software companies and 
enterprise software developers. And 
what about your customers? You can't 
control their rollout schedule. 

BZ Media is a mixture of Macs and 
Windows. Most Macs are running Mac 
OS X 10.5 Leopard, but there are still 
some on Mac OS X 10.4 Tiger. The Win- 
dows machines are mainly Windows XP 
Professional, though there are a handful 
of Windows Vista systems. 

Like other companies, we suffer the 
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pains of upgrading, not just with specific 
desktop applications and utilities that we 
use, but even with Web-based applica- 
tions. It's particularly painful when we're 
working with a third-party Web applica- 
tion that has become essential to part of 
our operations, whether it's the hosted 
CRM system that our sales- 
people use, or the digital page 
previewing system at SD 
Times' printing plant. 

These days, regression test- 
ing and rollout schedules are 
often predicated as much on 
how websites perform as well as 
anything else, because different 
browsers act differently on dif- 
ferent operating systems. We 
had one case where we had to delay the 
Leopard upgrade because a hosted Web 
app simply wasn't ready, and this caused 
real problems for new users, because 
their machines came pre-installed with 
Leopard. 

It's a headache of the first order. My 
Snow Leopard experience sucked up 
some time, but as the corporate guinea 
pig, I've taken careful notes, and further 
deployments will be faster. Everything 
important is working okay now. Even so, 
I'm sure a major "gotcha" will show up. 
Just wait until Windows 7 shows up — 
not just on our company desktops and 
notebooks, but also on the machines of 
SD Times readers who might initially 
experience issues accessing 

sdtimes. corn's functionality. 

Operating system upgrades: Get 
ready for the coming storm. I 

Alan Zeichick is editorial director of 

SD Times. Follow him on Twitter at 

twitter.com/zeichick. Read his blog at 
ztrek. blogspot. com. 



business briefs 



The waiting period for an antitrust review 
of IBM's proposed US$1.2 billion acquisi- 
tion of predictive analytic software maker 
SPSS has expired, meaning the deal will 
not draw any scrutiny from U.S. antitrust 
regulators. The next step in the takeover is 
for SPSS investors to vote on the deal. A 
meeting is scheduled for Oct. 2 in Chicago. 
When the acquisition comes to a close, 
IBM plans to create the Smart Analytics 
System, designed to help companies use 
hard data to make more intelligent busi- 
ness decisions more quickly . . . Microsoft 
plans to lay off an additional 27 employees 
from its Bellevue and Redmond locations 
by Nov. 1 as part of a cost-cutting initiative. 



Microsoft did not indicate from which 
department the layoffs would come. These 
staff cuts are in addition to the 5,000 lay- 
offs the company announced in January . 
. . TIBCO Software will acquire privately 
held DataSynapse, an enterprise grid and 
cloud computing software company, in a 
cash transaction valued at approximately 
US$28 million. 

EARNINGS: MKS reported that total rev- 
enue increased 2% to US$15.7 million in 
the first quarter of fiscal year 2010 from 
$15.4 million in the same quarter a year 
before. Net income was $1.4 million, com- 
pared to $0.6 million year-over-year. I 



Events Calendar 



ZapForum/Practical 


Oct. 1-2 


SOA & EA 




Washington, D.C. 




ZAPTHINK 




zapthink.com/events.html 




Hadoop World 


Oct. 2 


New York 




CLOUDERA 




www.cloudera.com/hadoop-world-nyc 




Adobe MAX 


Oct. 4-7 


Los Angeles 




ADOBE 




max.adobe.com 




VSLive Orlando 


Oct. 4-7 


Orlando 




1105 MEDIA 




vslive.com 




Oracle OpenWorld 


Oct. 11-15 


San Francisco 




ORACLE 




www.oracle.com/us/openworld 




Zend/PHP Conf. 


Oct. 19-22 


San Jose 




ZEND TECHNOLOGIES 




www.zendcon.com 




Microsoft SharePoint Conf. Oct. 19-22 


Las Vegas 




MICROSOFT 




www.mssharepointconference.com 




Software Test 


Oct. 19-23 


& Performance Conf. 




Cambridge, Mass. 




STP COLLABORATIVE MEDIA 




www.stpcon.com 




Web 2.0 Summit 


Oct. 20-22 


San Francisco 




O'REILLY MEDIA 




www.web2summit.com/web2009 




ARM TechCon3 


Oct. 21-23 


Santa Clara 




RTC GROUP 




www.armtechcon3.com/2009 




00PSLA 


Oct. 25-29 


Orlando 




ACM SIGPLAN 




www.oopsla.org/oopsla2009 




Cloud Computing Expo 


Nov. 2-4 


Santa Clara 




SYS-C0N 




www.cloudcomputingexpo.com 





Visualization Conf. & Expo Nov. 2-4 

Santa Clara 
SYS-C0N 

www.virtualizationconference.com 

PASS Community Summit Nov. 2-5 

Seattle 
PASS 

summit2009.sglpass.org 

ApacheCon Nov. 2-6 

Oakland 

APACHE SOFTWARE FOUNDATION 

www.us.apachecon.com/c/acus2009 



Business of Software 

San Francisco 

FOG CREEK AND REDGATE 

www.businessofsoftware.org 



Nov. 9-11 



For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Analyzing Data isn't Rocket Science; it's OLAP 

Make summarizing data in spreadsheets a thing of the past, and ComponentOne OLAP™ for WinForms your 
present-day solution. It's intuitive interface makes it quick and easy to create summaries dynamically, uncovering 
trends and providing valuable insights interactively. As you modify the data view, OLAP for WinForms instantly 
provides Grids, Charts, and Reports that can be saved, exported, or printed. Enjoy flexible and efficient data 
analysis in seconds. 




ComponentOne* 



OLAPfor WinForms 

GET STARTED TODAY • DOWNLOAD YOUR FREE TRIAL 

www.componentone.com/OLAPWinForms 
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ComponentOne Sales: 1 .800.858.2739 or 1 .41 2.681 .4343 
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gr Data Visualization 





Flexible data and KPI handling 
Intuitive drag-and-drop designer 
Robust dashboard viewing 
Simple integration and customization 
The latest Silverlight 3.0 technology 
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For more information please visit 

www.dundas.com/dashboard 

(41 6) 467-51 00 (800) 463-1 492 



